文件操作 - redlightnearme.log.1
返回文件管理
返回主菜单
删除本文件
文件: /storage/v12552/redlightnearme/logs/redlightnearme.log.1
编辑文件内容
37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:04:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785283439.7394819259643554687500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 104.196.16.188 - - - 404 MISS - - [29/Jul/2026:00:04:00 +0000] "GET /wp/ HTTP/1.1" 61134 "http://findredlightnearme.com/wp/" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" "104.196.16.188, 104.196.16.188, 104.196.16.188, 104.196.16.188" 104.196.16.188 - - - 404 MISS - - [29/Jul/2026:00:04:01 +0000] "GET /new/ HTTP/1.1" 61134 "http://findredlightnearme.com/new/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" "104.196.16.188, 104.196.16.188, 104.196.16.188, 104.196.16.188" 104.196.16.188 - - - 404 MISS - - [29/Jul/2026:00:04:03 +0000] "GET /blog/ HTTP/1.1" 61134 "http://findredlightnearme.com/blog/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.70 Safari/537.36 Vivaldi/6.7.3200.25" "104.196.16.188, 104.196.16.188, 104.196.16.188, 104.196.16.188" 104.196.16.188 - - - 404 MISS - - [29/Jul/2026:00:04:04 +0000] "GET /wordpress/ HTTP/1.1" 61134 "http://findredlightnearme.com/wordpress/" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36" "104.196.16.188, 104.196.16.188, 104.196.16.188, 104.196.16.188" 104.196.16.188 - - - 404 MISS - - [29/Jul/2026:00:04:05 +0000] "GET /old/ HTTP/1.1" 61134 "http://findredlightnearme.com/old/" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" "104.196.16.188, 104.196.16.188, 104.196.16.188, 104.196.16.188" 104.196.16.188 - - - 404 MISS - - [29/Jul/2026:00:04:07 +0000] "GET /backup/ HTTP/1.1" 61134 "http://findredlightnearme.com/backup/" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" "104.196.16.188, 104.196.16.188, 104.196.16.188, 104.196.16.188" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:10:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785283849.3751199245452880859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 202.51.202.242 - - - 200 BYPASS - - [29/Jul/2026:00:10:50 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "202.51.202.242, 202.51.202.242, 202.51.202.242, 202.51.202.242" 43.228.157.148 - - - 404 BYPASS - - [29/Jul/2026:00:11:20 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:20 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:20 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:20 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 MISS - - [29/Jul/2026:00:11:20 +0000] "GET /zzeqhgxe.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:20 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 HIT - - [29/Jul/2026:00:11:21 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 491 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 HIT - - [29/Jul/2026:00:11:21 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 14799 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 HIT - - [29/Jul/2026:00:11:21 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 14799 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 BYPASS - - [29/Jul/2026:00:11:22 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 14800 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 BYPASS - - [29/Jul/2026:00:11:24 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 14783 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 52.232.35.131 - - - 200 BYPASS - - [29/Jul/2026:00:11:33 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.232.35.131, 52.232.35.131, 52.232.35.131, 52.232.35.131" 52.232.35.131 - _uid=0100007F3545696A3843B74702990603 - 500 BYPASS - - [29/Jul/2026:00:11:34 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.232.35.131, 52.232.35.131, 52.232.35.131, 52.232.35.131" 54.39.203.246 - - - 200 BYPASS - - [29/Jul/2026:00:19:18 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "54.39.203.246, 54.39.203.246, 54.39.203.246, 54.39.203.246" 135.235.139.114 - - - 403 BYPASS - - [29/Jul/2026:00:21:03 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "135.235.139.114, 135.235.139.114, 135.235.139.114, 135.235.139.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:22:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785284566.1216979026794433593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.93.89.147 - - - 404 MISS - - [29/Jul/2026:00:22:46 +0000] "GET /.git/config HTTP/1.1" 14781 "https://www.findredlightnearme.com/.git/config" "Mozilla/5.0 (compatible; GitFinder/1.0)" "185.93.89.147, 185.93.89.147, 185.93.89.147, 185.93.89.147" 104.28.237.81 - - - 404 HIT - - [29/Jul/2026:00:22:50 +0000] "GET /.env HTTP/1.1" 61119 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:51 +0000] "GET /serviceAccountKey.json HTTP/1.1" 61142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:52 +0000] "GET /credentials.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:52 +0000] "GET /service-account.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:52 +0000] "GET /wp-config.php~ HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:52 +0000] "GET /secrets.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 403 BYPASS - - [29/Jul/2026:00:22:53 +0000] "GET /wp-config.php HTTP/1.1" 810 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:54 +0000] "GET /wp-config.php.bak HTTP/1.1" 61142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:54 +0000] "GET /.aws/config HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:54 +0000] "GET /wp-config.php.old HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:54 +0000] "GET /config.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:54 +0000] "GET /.aws/credentials HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:55 +0000] "GET /wp-config.php.save HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:55 +0000] "GET /.npmrc HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:57 +0000] "GET /.env.production HTTP/1.1" 61142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:57 +0000] "GET /.wp-config.php.swp HTTP/1.1" 61142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:57 +0000] "GET /.env.local HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:57 +0000] "GET /wp-content/debug.log HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:57 +0000] "GET /appsettings.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:57 +0000] "GET /.env.development HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:59 +0000] "GET /.env.bak HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:59 +0000] "GET /.env.backup HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:22:59 +0000] "GET /.env.staging HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:00 +0000] "GET /.env.old HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:01 +0000] "GET /.env.dev HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:01 +0000] "GET /.env.save HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:01 +0000] "GET /.env.prod HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:02 +0000] "GET /.openai/config.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:03 +0000] "GET /.cursor/mcp.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:04 +0000] "GET /.anthropic/config.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:04 +0000] "GET /.openclaw/openclaw.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:04 +0000] "GET /.openclaw/agents/main/agent/models.json HTTP/1.1" 61200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:05 +0000] "GET /service_account.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:06 +0000] "GET /client_secret.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:06 +0000] "GET /key.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:06 +0000] "GET /service-account-key.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:07 +0000] "GET /google-service-account.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:09 +0000] "GET /google-credentials.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:09 +0000] "GET /firebase-service-account.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:09 +0000] "GET /keyfile.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:09 +0000] "GET /firebase.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:11 +0000] "GET /google-services.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:11 +0000] "GET /.docker/config.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:11 +0000] "GET /firebase-adminsdk.json HTTP/1.1" 61142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 104.28.237.81 - - - 404 MISS - - [29/Jul/2026:00:23:11 +0000] "GET /gcp-credentials.json HTTP/1.1" 61134 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0" "104.28.237.81, 104.28.237.81, 104.28.237.81, 104.28.237.81" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:24:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785284680.6199059486389160156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 5.161.225.162 - - - 200 BYPASS - - [29/Jul/2026:00:24:41 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 5.161.225.162, 5.161.225.162, 5.161.225.162" 5.161.225.162 - _uid=0100007F4948696A3843B74702720B03 - 500 BYPASS - - [29/Jul/2026:00:24:42 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 5.161.225.162, 5.161.225.162, 5.161.225.162" 104.234.140.72 - - - 403 BYPASS - - [29/Jul/2026:00:28:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.72, 104.234.140.72, 104.234.140.72, 104.234.140.72" 104.234.140.64 - - - 403 BYPASS - - [29/Jul/2026:00:28:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.64, 104.234.140.64, 104.234.140.64, 104.234.140.64" 104.234.140.76 - - - 403 BYPASS - - [29/Jul/2026:00:28:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.76, 104.234.140.76, 104.234.140.76, 104.234.140.76" 104.234.140.72 - - - 403 BYPASS - - [29/Jul/2026:00:28:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.72, 104.234.140.72, 104.234.140.72, 104.234.140.72" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:28:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785284902.5166239738464355468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.234.143.81 - - - 207 BYPASS - - [29/Jul/2026:00:28:23 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 634 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0" "216.234.143.81, 216.234.143.81, 216.234.143.81, 216.234.143.81" 216.234.143.81 - - - 403 BYPASS - - [29/Jul/2026:00:28:23 +0000] "GET /readme.html HTTP/1.1" 385 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0" "216.234.143.81, 216.234.143.81, 216.234.143.81, 216.234.143.81" 216.234.143.81 - - - 207 BYPASS - - [29/Jul/2026:00:28:27 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0" "216.234.143.81, 216.234.143.81, 216.234.143.81, 216.234.143.81" 216.234.143.81 - - - 207 BYPASS - - [29/Jul/2026:00:28:30 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 338896 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0" "216.234.143.81, 216.234.143.81, 216.234.143.81, 216.234.143.81" 216.234.143.81 - - - 207 BYPASS - - [29/Jul/2026:00:28:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:115.0) Gecko/20100101 Firefox/115.0" "216.234.143.81, 216.234.143.81, 216.234.143.81, 216.234.143.81" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:33:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785285230.9890201091766357421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 104.248.157.6 - - - 200 BYPASS - - [29/Jul/2026:00:33:51 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "104.248.157.6, 104.248.157.6, 104.248.157.6, 104.248.157.6" 104.248.157.6 - _uid=0100007F6F4A696A3843B74702490E03 - 500 BYPASS - - [29/Jul/2026:00:33:52 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "104.248.157.6, 104.248.157.6, 104.248.157.6, 104.248.157.6" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:48:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785286106.3144791126251220703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 52.212.4.38 - - - 200 BYPASS - - [29/Jul/2026:00:48:26 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.212.4.38, 52.212.4.38, 52.212.4.38, 52.212.4.38" 52.212.4.38 - _uid=0100007FDA4D696A3843B74702A21403 - 500 BYPASS - - [29/Jul/2026:00:48:28 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.212.4.38, 52.212.4.38, 52.212.4.38, 52.212.4.38" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:59:33 +0000] "POST /wp-cron.php?doing_wp_cron=1785286772.9326179027557373046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 202.155.95.90 - - - 200 BYPASS - - [29/Jul/2026:00:59:33 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "202.155.95.90, 202.155.95.90, 202.155.95.90, 202.155.95.90" 202.155.95.90 - _uid=0100007F7550696A3843B74702241903 - 500 BYPASS - - [29/Jul/2026:00:59:34 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "202.155.95.90, 202.155.95.90, 202.155.95.90, 202.155.95.90" 194.71.100.75 - - - 200 BYPASS - - [29/Jul/2026:01:00:20 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.71.100.75, 194.71.100.75, 194.71.100.75, 194.71.100.75" 194.71.100.75 - _uid=0100007FA450696A3743AF4702DA0803 - 500 BYPASS - - [29/Jul/2026:01:00:21 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.71.100.75, 194.71.100.75, 194.71.100.75, 194.71.100.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:08:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785287338.2014610767364501953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:08:58 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 403 BYPASS - - [29/Jul/2026:01:08:59 +0000] "GET /readme.html HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:02 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:05 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 338896 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:15 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:21 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:26 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:29 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:31 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:33 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:35 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:37 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:39 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:41 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:42 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:44 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:45 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 141.11.86.26 - - - 207 BYPASS - - [29/Jul/2026:01:09:48 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "141.11.86.26, 141.11.86.26, 141.11.86.26, 141.11.86.26" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:13:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785287631.9277091026306152343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.145.49.99 - - - 200 BYPASS - - [29/Jul/2026:01:13:52 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 209.145.49.99 - _uid=0100007FD053696A3743AF4702710A03 - 500 BYPASS - - [29/Jul/2026:01:13:54 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 4.184.121.217 - - - 403 BYPASS - - [29/Jul/2026:01:15:50 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - - - 404 MISS - - [29/Jul/2026:01:15:51 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:15:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785287752.5808210372924804687500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 4.184.121.217 - - - 200 BYPASS - - [29/Jul/2026:01:15:53 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4954696A3843B747026A1F03 - 404 MISS - - [29/Jul/2026:01:15:54 +0000] "GET /wp-kikikoko.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4954696A3843B747026A1F03 - 404 MISS - - [29/Jul/2026:01:15:54 +0000] "GET /ftde.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4954696A3843B747026A1F03 - 404 MISS - - [29/Jul/2026:01:15:56 +0000] "GET /makeasmtp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FA216696A6022FC3A0259D803 - 404 MISS - - [29/Jul/2026:01:15:57 +0000] "GET /edit.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9616696A5D222E3B02532D03 - 404 MISS - - [29/Jul/2026:01:15:57 +0000] "GET /plugins.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF5C7686A6022FC3A02179B03 - 404 MISS - - [29/Jul/2026:01:15:58 +0000] "GET /news.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9996686A6022FC3A02277303 - 404 MISS - - [29/Jul/2026:01:15:58 +0000] "GET /post.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F06CC686A5D222E3B02872203 - 404 MISS - - [29/Jul/2026:01:15:59 +0000] "GET /muse.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F06CC686A5D222E3B02872203 - 404 MISS - - [29/Jul/2026:01:15:59 +0000] "GET /x.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F3213696A6022FC3A02C1D403 - 404 MISS - - [29/Jul/2026:01:16:00 +0000] "GET /m.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FBB58686A5D222E3B02841203 - 404 MISS - - [29/Jul/2026:01:16:00 +0000] "GET /wp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9A16696A6022FC3A0245D803 - 404 MISS - - [29/Jul/2026:01:16:01 +0000] "GET /shell.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FBD13696A6022FC3A0255D503 - 404 MISS - - [29/Jul/2026:01:16:01 +0000] "GET /install.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FBD13696A6022FC3A0255D503 - 404 MISS - - [29/Jul/2026:01:16:02 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9E16696A6022FC3A0250D803 - 404 MISS - - [29/Jul/2026:01:16:02 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9C16696A6022FC3A0248D803 - 404 MISS - - [29/Jul/2026:01:16:03 +0000] "GET /infoo.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9C16696A6022FC3A0248D803 - 404 MISS - - [29/Jul/2026:01:16:03 +0000] "GET /cong.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F0CCC686A6022FC3A02A4A103 - 404 MISS - - [29/Jul/2026:01:16:04 +0000] "GET /ok.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F7F76686A6022FC3A02FB6A03 - 404 MISS - - [29/Jul/2026:01:16:04 +0000] "GET /item.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F8A96686A6022FC3A02FE7203 - 404 MISS - - [29/Jul/2026:01:16:04 +0000] "GET /ini.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F09CC686A6022FC3A0299A103 - 404 MISS - - [29/Jul/2026:01:16:05 +0000] "GET /default.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F54D5686A6022FC3A0206AB03 - 404 MISS - - [29/Jul/2026:01:16:05 +0000] "GET /css.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF5C7686A6022FC3A021A9B03 - 404 MISS - - [29/Jul/2026:01:16:05 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9B16696A6022FC3A0247D803 - 404 MISS - - [29/Jul/2026:01:16:06 +0000] "GET /403.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F6776686A6022FC3A02C66A03 - 404 MISS - - [29/Jul/2026:01:16:06 +0000] "GET /as.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F48D5686A6022FC3A02E8AA03 - 404 MISS - - [29/Jul/2026:01:16:07 +0000] "GET /ty.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F07C8686A5D222E3B02CD1F03 - 404 MISS - - [29/Jul/2026:01:16:07 +0000] "GET /config.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F0BC8686A6022FC3A025B9B03 - 404 MISS - - [29/Jul/2026:01:16:07 +0000] "GET /info.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9916696A6022FC3A023DD803 - 404 MISS - - [29/Jul/2026:01:16:08 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9816696A5D222E3B02562D03 - 404 MISS - - [29/Jul/2026:01:16:08 +0000] "GET /404.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9816696A5D222E3B02562D03 - 404 MISS - - [29/Jul/2026:01:16:08 +0000] "GET /file.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9716696A5D222E3B02552D03 - 404 MISS - - [29/Jul/2026:01:16:09 +0000] "GET /moon.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F09CC686A6022FC3A0296A103 - 404 MISS - - [29/Jul/2026:01:16:09 +0000] "GET /radio.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F02C8686A5D222E3B02C01F03 - 404 MISS - - [29/Jul/2026:01:16:10 +0000] "GET /log.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F07CC686A6022FC3A028EA103 - 404 MISS - - [29/Jul/2026:01:16:11 +0000] "GET /baxa1.phP7 HTTP/1.1" 14693 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F07CC686A6022FC3A028EA103 - 404 MISS - - [29/Jul/2026:01:16:12 +0000] "GET /themes.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9D16696A6022FC3A024BD803 - 404 MISS - - [29/Jul/2026:01:16:12 +0000] "GET /d2.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9D16696A6022FC3A024BD803 - 404 MISS - - [29/Jul/2026:01:16:13 +0000] "GET /wp-2019.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9D16696A6022FC3A024BD803 - 404 MISS - - [29/Jul/2026:01:16:14 +0000] "GET /readme.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F07C8686A6022FC3A02519B03 - 404 MISS - - [29/Jul/2026:01:16:14 +0000] "GET /aa.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9716696A6022FC3A0239D803 - 404 MISS - - [29/Jul/2026:01:16:14 +0000] "GET /w.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9716696A5D222E3B02542D03 - 404 MISS - - [29/Jul/2026:01:16:15 +0000] "GET /wso.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9716696A5D222E3B02542D03 - 404 MISS - - [29/Jul/2026:01:16:15 +0000] "GET /BIBIL.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F9716696A5D222E3B02542D03 - 404 MISS - - [29/Jul/2026:01:16:16 +0000] "GET /lv.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF4C7686A6022FC3A02129B03 - 404 MISS - - [29/Jul/2026:01:16:16 +0000] "GET /style.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF4C7686A6022FC3A02129B03 - 404 MISS - - [29/Jul/2026:01:16:17 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 37.27.122.165 - _uid=0100007F44D5686A6022FC3A02D8AA03 - 200 BYPASS - - [29/Jul/2026:01:16:18 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=9ad90283e6 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 4.184.121.217 - _uid=0100007F44D5686A6022FC3A02D8AA03 - 302 BYPASS - - [29/Jul/2026:01:16:18 +0000] "GET /wp-admin/about.php HTTP/1.1" 512 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F44D5686A6022FC3A02D8AA03 - 200 BYPASS - - [29/Jul/2026:01:16:19 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2Fabout.php&reauth=1 HTTP/1.1" 4728 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F44D5686A6022FC3A02D8AA03 - 404 MISS - - [29/Jul/2026:01:16:20 +0000] "GET /functions.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - - - 404 MISS - - [29/Jul/2026:01:16:20 +0000] "GET /file7.php HTTP/1.1" 433 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F6454696A3843B74702991F03 - 404 MISS - - [29/Jul/2026:01:16:21 +0000] "GET /doc.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F06C8686A5D222E3B02C91F03 - 404 MISS - - [29/Jul/2026:01:16:21 +0000] "GET /db.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F0B16696A6022FC3A02A0D703 - 404 MISS - - [29/Jul/2026:01:16:22 +0000] "GET /xleet.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F47D5686A6022FC3A02E5AA03 - 404 MISS - - [29/Jul/2026:01:16:22 +0000] "GET /ar.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - - - 404 MISS - - [29/Jul/2026:01:16:22 +0000] "GET /0x.php HTTP/1.1" 433 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F6976686A6022FC3A02CC6A03 - 404 MISS - - [29/Jul/2026:01:16:23 +0000] "GET /xbgqdfrj.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F6976686A6022FC3A02CC6A03 - 404 MISS - - [29/Jul/2026:01:16:23 +0000] "GET /mah.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F05C8686A5D222E3B02C61F03 - 404 MISS - - [29/Jul/2026:01:16:24 +0000] "GET /login.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1916696A6022FC3A02C4D703 - 404 MISS - - [29/Jul/2026:01:16:24 +0000] "GET /jvirglze.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1916696A6022FC3A02C4D703 - 404 MISS - - [29/Jul/2026:01:16:26 +0000] "GET /erin1.PhP7 HTTP/1.1" 14693 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F2916696A6022FC3A02E7D703 - 404 MISS - - [29/Jul/2026:01:16:26 +0000] "GET /link.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF1C7686A6022FC3A02069B03 - 404 MISS - - [29/Jul/2026:01:16:27 +0000] "GET /file3.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF1C7686A6022FC3A02069B03 - 404 MISS - - [29/Jul/2026:01:16:27 +0000] "GET /faq.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF1C7686A6022FC3A02069B03 - 404 MISS - - [29/Jul/2026:01:16:28 +0000] "GET /13.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:28 +0000] "GET /echkm.php?p= HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:28 +0000] "GET /la.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:29 +0000] "GET /66.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:30 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:30 +0000] "GET /ava.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:31 +0000] "GET /resp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:32 +0000] "GET /bypltspd.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:32 +0000] "GET /jga.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:33 +0000] "GET /new4.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:34 +0000] "GET /yee.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:34 +0000] "GET /zc.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:35 +0000] "GET /cilus.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:36 +0000] "GET /domvf.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:36 +0000] "GET /c1.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:36 +0000] "GET /crgio.php?p= HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:37 +0000] "GET /drykl.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:38 +0000] "GET /waso.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:38 +0000] "GET /cro.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:39 +0000] "GET /.gitignore.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:39 +0000] "GET /d61.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:40 +0000] "GET /uwu.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A5D222E3B02B41F03 - 404 MISS - - [29/Jul/2026:01:16:40 +0000] "GET /cc.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:41 +0000] "GET /sta.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:41 +0000] "GET /2x.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:41 +0000] "GET /ingfo.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:42 +0000] "GET /ccc.php?p= HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:42 +0000] "GET /jdrot.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:43 +0000] "GET /alpha.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:43 +0000] "GET /jo.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:44 +0000] "GET /jos.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:45 +0000] "GET /srv.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:45 +0000] "GET /uninstall.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:46 +0000] "GET /transfer.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:46 +0000] "GET /geforce.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:47 +0000] "GET /r.php?p= HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:47 +0000] "GET /sixxis.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF0C7686A6022FC3A02039B03 - 404 MISS - - [29/Jul/2026:01:16:48 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:24:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785288299.0703480243682861328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 121.200.216.55 - - - 200 BYPASS - - [29/Jul/2026:01:24:59 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "121.200.216.55, 121.200.216.55, 121.200.216.55, 121.200.216.55" 121.200.216.55 - _uid=0100007F6B56696AFA79252902760303 - 500 BYPASS - - [29/Jul/2026:01:25:02 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "121.200.216.55, 121.200.216.55, 121.200.216.55, 121.200.216.55" 68.178.160.25 - - - 200 BYPASS - - [29/Jul/2026:01:25:34 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.178.160.25, 68.178.160.25, 68.178.160.25, 68.178.160.25" 68.178.160.25 - _uid=0100007F8E56696AFA79252902B60303 - 500 BYPASS - - [29/Jul/2026:01:25:35 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.178.160.25, 68.178.160.25, 68.178.160.25, 68.178.160.25" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:29:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785288542.3210148811340332031250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:01:29:03 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007F5F57696ACED127C002310303 - 500 BYPASS - - [29/Jul/2026:01:29:03 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:37:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785289040.5586040019989013671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.229.42 - - - 200 BYPASS - - [29/Jul/2026:01:37:21 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.229.42, 192.250.229.42, 192.250.229.42, 192.250.229.42" 192.250.229.42 - _uid=0100007F5159696A8BF0B71F02490303 - 500 BYPASS - - [29/Jul/2026:01:37:22 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.229.42, 192.250.229.42, 192.250.229.42, 192.250.229.42" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:51:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785289891.1551430225372314453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 157.230.148.169 - - - 200 BYPASS - - [29/Jul/2026:01:51:31 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.230.148.169, 157.230.148.169, 157.230.148.169, 157.230.148.169" 157.230.148.169 - _uid=0100007FA35C696A8BF0B71F029E0503 - 500 BYPASS - - [29/Jul/2026:01:51:32 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "157.230.148.169, 157.230.148.169, 157.230.148.169, 157.230.148.169" 194.63.239.149 - - - 200 BYPASS - - [29/Jul/2026:01:51:56 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.63.239.149, 194.63.239.149, 194.63.239.149, 194.63.239.149" 194.63.239.149 - _uid=0100007FBC5C696A8BF0B71F02A60503 - 500 BYPASS - - [29/Jul/2026:01:51:56 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.63.239.149, 194.63.239.149, 194.63.239.149, 194.63.239.149" 51.222.168.136 - - - 200 BYPASS - - [29/Jul/2026:01:52:45 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "51.222.168.136, 51.222.168.136, 51.222.168.136, 51.222.168.136" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:11 +0000] "GET /admin/upload/css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:19 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:19 +0000] "GET /wp-includes/autoloadclassmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:19 +0000] "GET /wp-class.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:19 +0000] "GET /acp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:20 +0000] "GET /g.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:20 +0000] "GET /.well-known/caches.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:20 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:20 +0000] "GET /wp-includes/css/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:21 +0000] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:02:22 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=9ad90283e6 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:02:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785290542.8059709072113037109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:02:23 +0000] "GET /wp-admin/network/admin.php HTTP/1.1" 610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:23 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:24 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:24 +0000] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:24 +0000] "GET /themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:24 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:25 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:25 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:25 +0000] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:25 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:26 +0000] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:26 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:26 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:26 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:27 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:27 +0000] "GET /files.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:27 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:27 +0000] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:28 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:28 +0000] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:28 +0000] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:29 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:29 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:29 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:29 +0000] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:30 +0000] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:30 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:31 +0000] "GET /wp-trackback.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:31 +0000] "GET /wp-content/uploads/cong.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:31 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:02:32 +0000] "GET /wp-admin/index.php HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:32 +0000] "GET /webadmin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:02:33 +0000] "GET /wp-admin/ HTTP/1.1" 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:33 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:34 +0000] "GET /ova.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:34 +0000] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:34 +0000] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:02:02:35 +0000] "GET /wp-admin/users.php HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:35 +0000] "GET /defaults.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:36 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:36 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:36 +0000] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:36 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:37 +0000] "GET /wp-includes/plugins.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:37 +0000] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:37 +0000] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:37 +0000] "GET /wp-admin/css/network.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:38 +0000] "GET /assets/bypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:38 +0000] "GET /sx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:38 +0000] "GET /wp-admin/images/chosen.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:39 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:39 +0000] "GET /wp-admin/install.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:39 +0000] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:39 +0000] "GET /cgi-bin/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:40 +0000] "GET /wp-admin/css/colors/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:40 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:40 +0000] "GET /comfunctions.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:40 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:41 +0000] "GET /wp-includes/widgets/include.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:41 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:41 +0000] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:02:02:41 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:43 +0000] "GET /.well-known/file.php/ HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:43 +0000] "GET /wp-includes/SimplePie/gzdecodes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:43 +0000] "GET /wp-back.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:02:02:43 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:02:02:44 +0000] "GET /themes/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:04:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785290674.7554779052734375000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 148.113.47.189 - - - 200 BYPASS - - [29/Jul/2026:02:04:35 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "148.113.47.189, 148.113.47.189, 148.113.47.189, 148.113.47.189" 148.113.47.189 - _uid=0100007FB35F696A8BF0B71F025C0703 - 500 BYPASS - - [29/Jul/2026:02:04:36 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "148.113.47.189, 148.113.47.189, 148.113.47.189, 148.113.47.189" 104.234.140.84 - - - 403 BYPASS - - [29/Jul/2026:02:14:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.84, 104.234.140.84, 104.234.140.84, 104.234.140.84" 104.234.140.66 - - - 403 BYPASS - - [29/Jul/2026:02:14:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.66, 104.234.140.66, 104.234.140.66, 104.234.140.66" 104.234.140.61 - - - 403 BYPASS - - [29/Jul/2026:02:14:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.61, 104.234.140.61, 104.234.140.61, 104.234.140.61" 104.234.140.61 - - - 403 BYPASS - - [29/Jul/2026:02:14:23 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.61, 104.234.140.61, 104.234.140.61, 104.234.140.61" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:23:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785291810.5222420692443847656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.239.60 - - - 200 BYPASS - - [29/Jul/2026:02:23:31 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.239.60, 192.250.239.60, 192.250.239.60, 192.250.239.60" 192.250.239.60 - _uid=0100007F2364696A8BF0B71F029F0A03 - 500 BYPASS - - [29/Jul/2026:02:23:32 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.239.60, 192.250.239.60, 192.250.239.60, 192.250.239.60" 167.71.240.77 - - - 200 BYPASS - - [29/Jul/2026:02:24:29 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:24:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785291870.9073889255523681640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.240.77 - _uid=0100007F5D64696A8BF0B71F02AD0A03 - 500 BYPASS - - [29/Jul/2026:02:24:31 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 144.76.32.117 - - - 200 MISS - - [29/Jul/2026:02:25:15 +0000] "GET /sitemap_index.xml HTTP/1.1" 849 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" "144.76.32.117, 144.76.32.117, 144.76.32.117, 144.76.32.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:31:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785292287.1700971126556396484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 154.38.175.180 - - - 200 BYPASS - - [29/Jul/2026:02:31:27 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 154.38.175.180 - _uid=0100007FFF65696A8BF0B71F021D0B03 - 500 BYPASS - - [29/Jul/2026:02:31:29 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:42:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785292976.7476100921630859375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.171.211.213 - - - 200 BYPASS - - [29/Jul/2026:02:42:57 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 213.171.211.213 - _uid=0100007FB168696A8BF0B71F02360C03 - 500 BYPASS - - [29/Jul/2026:02:42:58 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 149.202.168.36 - - - 200 BYPASS - - [29/Jul/2026:02:43:17 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "149.202.168.36, 149.202.168.36, 149.202.168.36, 149.202.168.36" 149.202.168.36 - _uid=0100007FC568696A8BF0B71F02400C03 - 500 BYPASS - - [29/Jul/2026:02:43:18 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "149.202.168.36, 149.202.168.36, 149.202.168.36, 149.202.168.36" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:45:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785293130.0592870712280273437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:02:45:30 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 195.130.35.148 - _uid=0100007F4A69696A8BF0B71F02670C03 - 500 BYPASS - - [29/Jul/2026:02:45:31 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:58:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785293893.7230029106140136718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.7.241.162 - - - 200 MISS - - [29/Jul/2026:02:58:14 +0000] "GET /robots.txt HTTP/1.1" 558 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" "74.7.241.162, 74.7.241.162, 74.7.241.162, 74.7.241.162" 74.7.241.2 - - - 200 HIT - - [29/Jul/2026:02:58:14 +0000] "GET /sitemap_index.xml HTTP/1.1" 829 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.241.2, 74.7.241.2, 74.7.241.2, 74.7.241.2" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:07:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785294472.8430609703063964843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.165.88.159 - - - 200 BYPASS - - [29/Jul/2026:03:07:53 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.165.88.159, 213.165.88.159, 213.165.88.159, 213.165.88.159" 213.165.88.159 - _uid=0100007F896E696A8BF0B71F028E0D03 - 500 BYPASS - - [29/Jul/2026:03:07:54 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.165.88.159, 213.165.88.159, 213.165.88.159, 213.165.88.159" 194.71.100.75 - - - 200 BYPASS - - [29/Jul/2026:03:08:24 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.71.100.75, 194.71.100.75, 194.71.100.75, 194.71.100.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:12:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785294755.7618389129638671875000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:03:12:36 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 198.38.94.67 - _uid=0100007FA46F696A8BF0B71F02D10D03 - 500 BYPASS - - [29/Jul/2026:03:12:37 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 51.161.37.207 - - - 200 BYPASS - - [29/Jul/2026:03:17:05 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "51.161.37.207, 51.161.37.207, 51.161.37.207, 51.161.37.207" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:29:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785295761.5163030624389648437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 121.200.216.55 - - - 200 BYPASS - - [29/Jul/2026:03:29:22 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "121.200.216.55, 121.200.216.55, 121.200.216.55, 121.200.216.55" 121.200.216.55 - _uid=0100007F9273696A92F0672002E70503 - 500 BYPASS - - [29/Jul/2026:03:29:23 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "121.200.216.55, 121.200.216.55, 121.200.216.55, 121.200.216.55" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:03:29:35 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:03:30:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 194.5.48.210 - - - 403 BYPASS - - [29/Jul/2026:03:30:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.210, 194.5.48.210, 194.5.48.210, 194.5.48.210" 194.5.48.223 - - - 403 BYPASS - - [29/Jul/2026:03:30:30 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.223, 194.5.48.223, 194.5.48.223, 194.5.48.223" 194.5.48.215 - - - 403 BYPASS - - [29/Jul/2026:03:30:30 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.215, 194.5.48.215, 194.5.48.215, 194.5.48.215" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:52:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785297149.8178770542144775390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:03:52:30 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FFE78696A8BF0B71F02781103 - 500 BYPASS - - [29/Jul/2026:03:52:31 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:03:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785297828.2850580215454101562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 168.144.36.115 - - - 200 BYPASS - - [29/Jul/2026:04:03:48 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "168.144.36.115, 168.144.36.115, 168.144.36.115, 168.144.36.115" 168.144.36.115 - _uid=0100007FA47B696A8BF0B71F02A21203 - 500 BYPASS - - [29/Jul/2026:04:03:49 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "168.144.36.115, 168.144.36.115, 168.144.36.115, 168.144.36.115" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:16:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785298590.2161550521850585937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 51.195.39.150 - - - 404 MISS - - [29/Jul/2026:04:16:30 +0000] "GET /sh269817916890 HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:150.0) Gecko/20100101 Firefox/150.0" "51.195.39.150, 51.195.39.150, 51.195.39.150, 51.195.39.150" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:21:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785298885.7169969081878662109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.153.140.50 - - - 200 BYPASS - - [29/Jul/2026:04:21:26 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.153.140.50, 20.153.140.50, 20.153.140.50, 20.153.140.50" 20.153.140.50 - _uid=0100007FC67F696A8BF0B71F02AA1303 - 500 BYPASS - - [29/Jul/2026:04:21:27 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.153.140.50, 20.153.140.50, 20.153.140.50, 20.153.140.50" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:04:21:50 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007FDE7F696A8BF0B71F02AC1303 - 500 BYPASS - - [29/Jul/2026:04:21:51 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:25:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785299137.9086050987243652343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.61.188.240 - - - 200 BYPASS - - [29/Jul/2026:04:25:38 +0000] "GET /wp-json/ HTTP/1.1" 25076 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:29:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785299375.8493380546569824218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.61.188.240 - - - 207 BYPASS - - [29/Jul/2026:04:29:36 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 339338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - _uid=0100007FAF81696A92F06720028D0603 - 207 BYPASS - - [29/Jul/2026:04:29:38 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 339239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - - - 200 BYPASS - - [29/Jul/2026:04:29:41 +0000] "POST /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback HTTP/1.1" 241 "-" "python-requests/2.34.2" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - _uid=0100007FB581696A8BF0B71F023C1403 - 200 BYPASS - - [29/Jul/2026:04:29:44 +0000] "GET /wp-content/plugins/wp_hzerzfa/wp_hzerzfa.php HTTP/1.1" 153 "-" "python-requests/2.34.2" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - _uid=0100007FB581696A8BF0B71F023C1403 - 200 BYPASS - - [29/Jul/2026:04:29:45 +0000] "GET /wp-content/plugins/wp_hzerzfa/wp_hzerzfa.php HTTP/1.1" 153 "-" "python-requests/2.34.2" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - _uid=0100007FB581696A8BF0B71F023C1403 - 200 BYPASS - - [29/Jul/2026:04:29:48 +0000] "GET /wp-content/plugins/wp_hzerzfa/wp_hzerzfa.php HTTP/1.1" 153 "-" "python-requests/2.34.2" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - _uid=0100007FB581696A8BF0B71F023C1403 - 200 BYPASS - - [29/Jul/2026:04:29:51 +0000] "GET /wp-content/plugins/wp_hzerzfa/wp_hzerzfa.php HTTP/1.1" 153 "-" "python-requests/2.34.2" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 45.61.188.240 - _uid=0100007FB581696A8BF0B71F023C1403 - 200 BYPASS - - [29/Jul/2026:04:29:53 +0000] "GET /wp-content/plugins/wp_hzerzfa/wp_hzerzfa.php HTTP/1.1" 153 "-" "python-requests/2.34.2" "45.61.188.240, 45.61.188.240, 45.61.188.240, 45.61.188.240" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:36:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785299768.9474039077758789062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 170.249.236.27 - - - 200 BYPASS - - [29/Jul/2026:04:36:09 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "170.249.236.27, 170.249.236.27, 170.249.236.27, 170.249.236.27" 170.249.236.27 - _uid=0100007F3983696A8BF0B71F02871403 - 500 BYPASS - - [29/Jul/2026:04:36:10 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "170.249.236.27, 170.249.236.27, 170.249.236.27, 170.249.236.27" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:04:36:41 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007F5983696A8BF0B71F028E1403 - 500 BYPASS - - [29/Jul/2026:04:36:42 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:47:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785300439.9096150398254394531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:04:47:20 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007FD885696A8BF0B71F02711503 - 500 BYPASS - - [29/Jul/2026:04:47:21 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 142.44.220.15 - - - 200 BYPASS - - [29/Jul/2026:04:48:26 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "142.44.220.15, 142.44.220.15, 142.44.220.15, 142.44.220.15" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:07:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785301678.6930849552154541015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 68.178.160.25 - - - 200 BYPASS - - [29/Jul/2026:05:07:59 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.178.160.25, 68.178.160.25, 68.178.160.25, 68.178.160.25" 68.178.160.25 - _uid=0100007FAF8A696A8BF0B71F02F31703 - 500 BYPASS - - [29/Jul/2026:05:08:00 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.178.160.25, 68.178.160.25, 68.178.160.25, 68.178.160.25" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:09:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785301793.3427429199218750000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:05:09:53 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F218B696A92F0672002010703 - 500 BYPASS - - [29/Jul/2026:05:09:54 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:17:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785302266.2620339393615722656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:05:17:46 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 195.130.35.148 - _uid=0100007FFA8C696A8BF0B71F02CC1803 - 500 BYPASS - - [29/Jul/2026:05:17:47 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:54 +0000] "GET /test1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 BYPASS - - [29/Jul/2026:05:17:54 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:17:55 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:55 +0000] "GET /zoom1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:55 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:55 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:56 +0000] "GET /sf.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:56 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:56 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:56 +0000] "GET /b.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:57 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:57 +0000] "GET /config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:57 +0000] "GET /num.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:57 +0000] "GET /areak1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:57 +0000] "GET /vc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:17:58 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:58 +0000] "GET /core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:17:58 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:17:59 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:17:59 +0000] "GET /wp-content/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:17:59 +0000] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:17:59 +0000] "GET /ws37.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:00 +0000] "GET /assets/ HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:01 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:01 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:01 +0000] "GET /il.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:01 +0000] "GET /images/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:02 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:02 +0000] "GET /load.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:02 +0000] "GET /wp-content/themes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:02 +0000] "GET /wp-themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:03 +0000] "GET /xda.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:03 +0000] "GET /.trash7206/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:03 +0000] "GET /doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:03 +0000] "GET /storage/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:04 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:04 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:04 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:04 +0000] "GET /wp-includes/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:05 +0000] "GET /wp-includes/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:05 +0000] "GET /cache.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:05 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:06 +0000] "GET /wp-blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:06 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:06 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:06 +0000] "GET /cd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:07 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:07 +0000] "GET /lu4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 BYPASS - - [29/Jul/2026:05:18:07 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:07 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:08 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:08 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:08 +0000] "GET /ant.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:08 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:09 +0000] "GET /storage/rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:09 +0000] "GET /tinyfilemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:10 +0000] "GET /wp-includes/bk/ HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:10 +0000] "GET /403.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:10 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:11 +0000] "GET /tool.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:11 +0000] "GET /wp-admin/includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:18:13 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=9ad90283e6 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 74.249.213.70 - - - 302 BYPASS - - [29/Jul/2026:05:18:13 +0000] "GET /wp-admin/index.php HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:13 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:13 +0000] "GET /wp-content/themes/pridmag/b.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:14 +0000] "GET /wp-includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 HIT - - [29/Jul/2026:05:18:14 +0000] "GET /wp-trackback.php HTTP/1.1" 518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 HIT - - [29/Jul/2026:05:18:14 +0000] "GET /ws.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:15 +0000] "GET /.bod/.ll/ HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:15 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:16 +0000] "GET /1index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:16 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:16 +0000] "GET /dvve.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:16 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:17 +0000] "GET /ws77.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:17 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:17 +0000] "GET /admin/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 BYPASS - - [29/Jul/2026:05:18:17 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:18 +0000] "GET /wp-includes/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:18 +0000] "GET /xx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:18 +0000] "GET /wp-content/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:18 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:19 +0000] "GET /wp-the.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:19 +0000] "GET /ws81.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:19 +0000] "GET /3.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:20 +0000] "GET /a1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:20 +0000] "GET /ca5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 HIT - - [29/Jul/2026:05:18:20 +0000] "GET /install.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:20 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:21 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:21 +0000] "GET /wp-signin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:21 +0000] "GET /Ov-Simple1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:21 +0000] "GET /fm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:22 +0000] "GET /ftde.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:22 +0000] "GET /hplfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:22 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:22 +0000] "GET /test.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:23 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 404 MISS - - [29/Jul/2026:05:18:23 +0000] "GET /wp-admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:23 +0000] "GET /wp-admin/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 302 BYPASS - - [29/Jul/2026:05:18:24 +0000] "GET /wp-admin/network/ HTTP/1.1" 601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 500 MISS - - [29/Jul/2026:05:18:24 +0000] "GET /wp-config-sample.php HTTP/1.1" 2853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:24 +0000] "GET /wp-content/packed.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 74.249.213.70 - - - 403 BYPASS - - [29/Jul/2026:05:18:25 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.249.213.70, 74.249.213.70, 74.249.213.70, 74.249.213.70" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:21:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785302503.6962270736694335937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:05:21:44 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007FE88D696A8BF0B71F02A61903 - 500 BYPASS - - [29/Jul/2026:05:21:44 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:32:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785303178.2703640460968017578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:05:32:58 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007F8A90696A8BF0B71F02DF1A03 - 500 BYPASS - - [29/Jul/2026:05:32:59 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 45.84.122.194 - - - 207 BYPASS - - [29/Jul/2026:05:33:55 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FC390696A8BF0B71F020A1B03 - 207 BYPASS - - [29/Jul/2026:05:33:57 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:33:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785303239.3256599903106689453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.84.122.194 - _uid=0100007FC390696A8BF0B71F020A1B03 - 207 BYPASS - - [29/Jul/2026:05:34:00 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FC390696A8BF0B71F020A1B03 - 207 BYPASS - - [29/Jul/2026:05:34:01 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 144.79.133.30 - - - 200 BYPASS - - [29/Jul/2026:05:34:01 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.79.133.30, 144.79.133.30, 144.79.133.30, 144.79.133.30" 144.79.133.30 - _uid=0100007FC990696A8BF0B71F02101B03 - 500 BYPASS - - [29/Jul/2026:05:34:04 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.79.133.30, 144.79.133.30, 144.79.133.30, 144.79.133.30" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:34:05 +0000] "GET /?p=1 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:34:06 +0000] "GET /?p=1 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:34:06 +0000] "GET /?p=1 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:34:07 +0000] "GET /?p=1 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:07 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 5315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:09 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:11 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:12 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:14 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4455 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:34:16 +0000] "GET /?p=1 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:16 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 10373 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - - - 200 BYPASS - - [29/Jul/2026:05:34:19 +0000] "GET /wp-login.php HTTP/1.1" 6976 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FDB90696A8BF0B71F021A1B03 - 500 BYPASS - - [29/Jul/2026:05:34:20 +0000] "POST /wp-login.php HTTP/1.1" 3375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:22 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 5611 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:23 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 2003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FF67E686A5D222E3B02911703 - 207 BYPASS - - [29/Jul/2026:05:34:25 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 2003 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - - - 200 BYPASS - - [29/Jul/2026:05:34:27 +0000] "GET /wp-login.php HTTP/1.1" 6976 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 45.84.122.194 - _uid=0100007FE390696A8BF0B71F02221B03 - 500 BYPASS - - [29/Jul/2026:05:34:28 +0000] "POST /wp-login.php HTTP/1.1" 3375 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.84.122.194, 45.84.122.194, 45.84.122.194, 45.84.122.194" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:51:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785304302.2067029476165771484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:57:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785304620.9736099243164062500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:05:57:01 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F2D96696A8BF0B71F02F81E03 - 500 BYPASS - - [29/Jul/2026:05:57:02 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:58:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785304706.0923709869384765625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:59:47 +0000] "POST /wp-cron.php?doing_wp_cron=1785304786.7758860588073730468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:00:08 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:00:08 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:00:08 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:00:09 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:00:09 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:00:09 +0000] "GET /dyljpwcg.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:00:09 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 14800 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:00:09 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:00:10 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 14798 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:00:11 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 14783 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:00:11 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 14798 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 4.184.121.217 - - - 403 BYPASS - - [29/Jul/2026:06:00:16 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007FF096696A8BF0B71F02961F03 - 404 MISS - - [29/Jul/2026:06:00:16 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4754696A3843B74702651F03 - 404 MISS - - [29/Jul/2026:06:00:17 +0000] "GET /x.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4754696A3843B74702651F03 - 404 MISS - - [29/Jul/2026:06:00:17 +0000] "GET /readme.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4754696A3843B74702651F03 - 404 MISS - - [29/Jul/2026:06:00:17 +0000] "GET /la.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4754696A3843B74702651F03 - 404 MISS - - [29/Jul/2026:06:00:18 +0000] "GET /style.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4754696A3843B74702651F03 - 404 MISS - - [29/Jul/2026:06:00:18 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F4754696A3843B74702651F03 - 404 HIT - - [29/Jul/2026:06:00:19 +0000] "GET /css.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F0F8D696A8BF0B71F02F91803 - 404 HIT - - [29/Jul/2026:06:00:19 +0000] "GET /fm.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1D8D696A8BF0B71F02281903 - 404 MISS - - [29/Jul/2026:06:00:19 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1D8D696A8BF0B71F02281903 - 404 MISS - - [29/Jul/2026:06:00:20 +0000] "GET /alpha.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1D8D696A8BF0B71F02281903 - 404 MISS - - [29/Jul/2026:06:00:20 +0000] "GET /wp-2019.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1D8D696A8BF0B71F02281903 - 404 MISS - - [29/Jul/2026:06:00:21 +0000] "GET /db.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1D8D696A8BF0B71F02281903 - 404 HIT - - [29/Jul/2026:06:00:22 +0000] "GET /403.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F128D696A8BF0B71F02061903 - 404 HIT - - [29/Jul/2026:06:00:22 +0000] "GET /ftde.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F02291903 - 404 MISS - - [29/Jul/2026:06:00:23 +0000] "GET /edit.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F02291903 - 404 MISS - - [29/Jul/2026:06:00:23 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F02291903 - 404 HIT - - [29/Jul/2026:06:00:23 +0000] "GET /radio.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1C8D696A8BF0B71F02241903 - 404 MISS - - [29/Jul/2026:06:00:24 +0000] "GET /.gitignore.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1C8D696A8BF0B71F02241903 - 404 MISS - - [29/Jul/2026:06:00:24 +0000] "GET /bengi.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1C8D696A8BF0B71F02241903 - 404 MISS - - [29/Jul/2026:06:00:25 +0000] "GET /jga.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1C8D696A8BF0B71F02241903 - 404 MISS - - [29/Jul/2026:06:00:25 +0000] "GET /crgio.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1C8D696A8BF0B71F02241903 - 404 MISS - - [29/Jul/2026:06:00:25 +0000] "GET /wp-kikikoko.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1C8D696A8BF0B71F02241903 - 404 HIT - - [29/Jul/2026:06:00:26 +0000] "GET /r.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:26 +0000] "GET /file.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:27 +0000] "GET /ty.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:27 +0000] "GET /as.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:28 +0000] "GET /makeasmtp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 37.27.122.165 - _uid=0100007F038D696A8BF0B71F02D41803 - 200 BYPASS - - [29/Jul/2026:06:00:29 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=9ad90283e6 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 302 BYPASS - - [29/Jul/2026:06:00:29 +0000] "GET /wp-admin/about.php HTTP/1.1" 512 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 200 BYPASS - - [29/Jul/2026:06:00:30 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2Fabout.php&reauth=1 HTTP/1.1" 4728 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:30 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:30 +0000] "GET /m.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 200 BYPASS - - [29/Jul/2026:06:00:32 +0000] "GET /wp-login.php HTTP/1.1" 2663 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:32 +0000] "GET /ava.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:33 +0000] "GET /plugins.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 MISS - - [29/Jul/2026:06:00:33 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F038D696A8BF0B71F02D41803 - 404 HIT - - [29/Jul/2026:06:00:33 +0000] "GET /log.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F022B1903 - 404 MISS - - [29/Jul/2026:06:00:34 +0000] "GET /w.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F022B1903 - 404 MISS - - [29/Jul/2026:06:00:34 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F022B1903 - 404 MISS - - [29/Jul/2026:06:00:34 +0000] "GET /cc.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F022B1903 - 404 MISS - - [29/Jul/2026:06:00:35 +0000] "GET /moon.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F022B1903 - 404 MISS - - [29/Jul/2026:06:00:35 +0000] "GET /shell.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F1E8D696A8BF0B71F022B1903 - 404 HIT - - [29/Jul/2026:06:00:35 +0000] "GET /config.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F058D696A8BF0B71F02D91803 - 404 MISS - - [29/Jul/2026:06:00:36 +0000] "GET /mah.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F058D696A8BF0B71F02D91803 - 404 HIT - - [29/Jul/2026:06:00:36 +0000] "GET /themes.php HTTP/1.1" 403 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:36 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:37 +0000] "GET /wp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:37 +0000] "GET /uninstall.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:37 +0000] "GET /echkm.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:38 +0000] "GET /domvf.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:38 +0000] "GET /item.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:38 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:39 +0000] "GET /404.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:39 +0000] "GET /resp.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 4.184.121.217 - _uid=0100007F305F696A8BF0B71F02D80603 - 404 MISS - - [29/Jul/2026:06:00:40 +0000] "GET /login.php HTTP/1.1" 345 "-" "-" "4.184.121.217, 4.184.121.217, 4.184.121.217, 4.184.121.217" 66.132.172.188 - - - 404 BYPASS - - [29/Jul/2026:06:02:39 +0000] "GET /favicon.ico HTTP/1.1" 385 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" "66.132.172.188, 66.132.172.188, 66.132.172.188, 66.132.172.188" 103.60.15.171 - _uid=0100007F6B69696A8BF0B71F02690C03 - 200 BYPASS - - [29/Jul/2026:06:03:36 +0000] "GET /wp-content/uploads/2024/05/Screenshot-2024-05-30-221504.png?nonwebp=1&edge=findredlightnearme.com HTTP/1.1" 13212 "-" "BunnyOptimizer-v01" "103.60.15.171, 103.60.15.171, 103.60.15.171" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:07:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785305245.9704720973968505859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:26 +0000] "POST /?rest_route=/batch/v1&_w2s=cf931005 HTTP/1.1" 64015 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:27 +0000] "POST /?rest_route=/batch/v1&_w2s=f4c63a98 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:28 +0000] "POST /?rest_route=/batch/v1&_w2s=e877fe59 HTTP/1.1" 39917 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:28 +0000] "POST /?rest_route=/batch/v1&_w2s=a7742335 HTTP/1.1" 54505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:28 +0000] "POST /?rest_route=/batch/v1&_w2s=4fb9767b HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:28 +0000] "POST /?rest_route=/batch/v1&_w2s=d043bb88 HTTP/1.1" 2139405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:28 +0000] "POST /?rest_route=/batch/v1&_w2s=5570c627 HTTP/1.1" 9018 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:29 +0000] "POST /?rest_route=/batch/v1&_w2s=4659da34 HTTP/1.1" 93838 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:29 +0000] "POST /?rest_route=/batch/v1&_w2s=6ff1ea55 HTTP/1.1" 11283856 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:29 +0000] "POST /?rest_route=/batch/v1&_w2s=37e299cb HTTP/1.1" 7201 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:29 +0000] "POST /?rest_route=/batch/v1&_w2s=09fc89f3 HTTP/1.1" 12368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:29 +0000] "POST /?rest_route=/batch/v1&_w2s=6acc5950 HTTP/1.1" 22667 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:29 +0000] "POST /?rest_route=/batch/v1&_w2s=1648c5e7 HTTP/1.1" 7221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:30 +0000] "POST /?rest_route=/batch/v1&_w2s=c087a562 HTTP/1.1" 8958 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:30 +0000] "POST /?rest_route=/batch/v1&_w2s=fac07c54 HTTP/1.1" 10648 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:30 +0000] "POST /?rest_route=/batch/v1&_w2s=436e0615 HTTP/1.1" 14086 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:30 +0000] "POST /?rest_route=/batch/v1&_w2s=4e084d2c HTTP/1.1" 31440 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:30 +0000] "POST /?rest_route=/batch/v1&_w2s=1d591f40 HTTP/1.1" 31316 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:31 +0000] "POST /?rest_route=/batch/v1&_w2s=9fcf5f33 HTTP/1.1" 5495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:31 +0000] "POST /?rest_route=/batch/v1&_w2s=42b4ff95 HTTP/1.1" 19293 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:31 +0000] "POST /?rest_route=/batch/v1&_w2s=a274c1b9 HTTP/1.1" 8954 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:31 +0000] "POST /?rest_route=/batch/v1&_w2s=8f065ebc HTTP/1.1" 8929 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:31 +0000] "POST /?rest_route=/batch/v1&_w2s=3952ca2e HTTP/1.1" 12363 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:32 +0000] "POST /?rest_route=/batch/v1&_w2s=eb972f49 HTTP/1.1" 11282139 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:32 +0000] "POST /?rest_route=/batch/v1&_w2s=38f44954 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:32 +0000] "POST /?rest_route=/batch/v1&_w2s=06b0ceb1 HTTP/1.1" 31398 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:33 +0000] "POST /?rest_route=/batch/v1&_w2s=cd983414 HTTP/1.1" 1327 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 20.115.9.232 - - - 207 BYPASS - - [29/Jul/2026:06:07:35 +0000] "POST /?rest_route=/batch/v1&_w2s=54af0ddd HTTP/1.1" 11281459 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "20.115.9.232, 20.115.9.232, 20.115.9.232, 20.115.9.232" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:19:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785305998.9832990169525146484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 144.91.114.195 - - - 200 BYPASS - - [29/Jul/2026:06:19:59 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.91.114.195, 144.91.114.195, 144.91.114.195, 144.91.114.195" 144.91.114.195 - _uid=0100007F8F9B696A8BF0B71F02172403 - 500 BYPASS - - [29/Jul/2026:06:20:11 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.91.114.195, 144.91.114.195, 144.91.114.195, 144.91.114.195" 142.44.228.88 - - - 200 BYPASS - - [29/Jul/2026:06:21:37 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "142.44.228.88, 142.44.228.88, 142.44.228.88, 142.44.228.88" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:30:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785306614.2096641063690185546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.66 - - - 200 BYPASS - - [29/Jul/2026:06:30:14 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.66, 198.38.94.66, 198.38.94.66, 198.38.94.66" 198.38.94.66 - _uid=0100007FF69D696A8BF0B71F026F2603 - 500 BYPASS - - [29/Jul/2026:06:30:15 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.66, 198.38.94.66, 198.38.94.66, 198.38.94.66" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:31:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785306685.7071840763092041015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.70.215 - - - 200 BYPASS - - [29/Jul/2026:06:31:26 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.70.215, 167.71.70.215, 167.71.70.215, 167.71.70.215" 167.71.70.215 - _uid=0100007F3E9E696A8BF0B71F02A62603 - 500 BYPASS - - [29/Jul/2026:06:31:26 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.70.215, 167.71.70.215, 167.71.70.215, 167.71.70.215" 192.250.235.218 - - - 200 BYPASS - - [29/Jul/2026:06:31:43 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.235.218, 192.250.235.218, 192.250.235.218, 192.250.235.218" 192.250.235.218 - _uid=0100007F4F9E696A92F0672002BA0B03 - 500 BYPASS - - [29/Jul/2026:06:31:44 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.235.218, 192.250.235.218, 192.250.235.218, 192.250.235.218" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:44:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785307464.3812029361724853515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.133.216.219 - - - 200 BYPASS - - [29/Jul/2026:06:44:25 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.216.219, 103.133.216.219, 103.133.216.219, 103.133.216.219" 103.133.216.219 - _uid=0100007F49A1696A8BF0B71F02992803 - 500 BYPASS - - [29/Jul/2026:06:44:26 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.216.219, 103.133.216.219, 103.133.216.219, 103.133.216.219" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:46:39 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=9ad90283e6 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:46:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785307599.4495398998260498046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.250.119.94 - - - 302 BYPASS - - [29/Jul/2026:06:46:40 +0000] "GET /wp-admin/ HTTP/1.1" 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007FD0A1696A8BF0B71F02F62803 - 200 BYPASS - - [29/Jul/2026:06:46:40 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 4722 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007FD0A1696A8BF0B71F02F62803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/css/dashicons.min.css?ver=6.9.1 HTTP/1.1" 36131 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F076F686A6022FC3A02776803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/css/buttons.min.css?ver=6.9.1 HTTP/1.1" 1852 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F076F686A6022FC3A02776803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-admin/css/forms.min.css?ver=6.9.1 HTTP/1.1" 7002 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F076F686A6022FC3A02776803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-admin/css/l10n.min.css?ver=6.9.1 HTTP/1.1" 1148 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F076F686A6022FC3A02776803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-admin/css/login.min.css?ver=6.9.1 HTTP/1.1" 2553 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F076F686A6022FC3A02776803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/js/clipboard.min.js?ver=2.0.11 HTTP/1.1" 3547 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F076F686A6022FC3A02776803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1" 651 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-admin/js/password-strength-meter.min.js?ver=6.9.1 HTTP/1.1" 1016 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1" 7714 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/js/wp-util.min.js?ver=6.9.1 HTTP/1.1" 1151 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1" 715 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:41 +0000] "GET /wp-includes/js/dist/a11y.min.js?ver=cb460b4676c94bd228ed HTTP/1.1" 1324 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:42 +0000] "GET /wp-admin/js/user-profile.min.js?ver=6.9.1 HTTP/1.1" 3546 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:42 +0000] "GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1" 1204 "https://findredlightnearme.com/wp-admin/css/login.min.css?ver=6.9.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 200 BYPASS - - [29/Jul/2026:06:46:42 +0000] "GET /wp-includes/js/zxcvbn.min.js HTTP/1.1" 399640 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F116F686A6022FC3A02896803 - 500 BYPASS - - [29/Jul/2026:06:46:46 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 194.5.48.161 - - - 403 BYPASS - - [29/Jul/2026:06:48:37 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161" 194.5.48.159 - - - 403 BYPASS - - [29/Jul/2026:06:48:37 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159" 194.5.48.159 - - - 403 BYPASS - - [29/Jul/2026:06:48:38 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:06:48:38 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:54:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785308074.0389800071716308593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 98.70.32.248 - - - 200 BYPASS - - [29/Jul/2026:06:54:34 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "98.70.32.248, 98.70.32.248, 98.70.32.248, 98.70.32.248" 98.70.32.248 - _uid=0100007FAAA3696A92F06720020B0E03 - 500 BYPASS - - [29/Jul/2026:06:54:36 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "98.70.32.248, 98.70.32.248, 98.70.32.248, 98.70.32.248" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:56:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785308180.5645790100097656250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:06:56:21 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:00:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785308400.7540628910064697265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 161.248.201.7 - - - 200 BYPASS - - [29/Jul/2026:07:00:01 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "161.248.201.7, 161.248.201.7, 161.248.201.7, 161.248.201.7" 161.248.201.7 - _uid=0100007FF1A4696A8BF0B71F02CD2A03 - 500 BYPASS - - [29/Jul/2026:07:00:02 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "161.248.201.7, 161.248.201.7, 161.248.201.7, 161.248.201.7" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:18:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785309502.1601769924163818359375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 158.106.137.107 - - - 200 BYPASS - - [29/Jul/2026:07:18:22 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 158.106.137.107 - _uid=0100007F3EA9696A8BF0B71F02D72D03 - 500 BYPASS - - [29/Jul/2026:07:18:23 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 192.250.227.216 - - - 200 BYPASS - - [29/Jul/2026:07:18:36 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.216, 192.250.227.216, 192.250.227.216, 192.250.227.216" 192.250.227.216 - _uid=0100007F4CA9696A8BF0B71F02E72D03 - 500 BYPASS - - [29/Jul/2026:07:18:37 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.216, 192.250.227.216, 192.250.227.216, 192.250.227.216" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:25:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785309901.4408149719238281250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:07:25:02 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 57.141.0.23 - - - 200 BYPASS - - [29/Jul/2026:07:28:44 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))" "57.141.0.23, 57.141.0.23, 57.141.0.23, 57.141.0.23" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:38:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785310680.3198769092559814453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:07:38:00 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FD8AD696A8BF0B71F02383103 - 500 BYPASS - - [29/Jul/2026:07:38:01 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 194.5.48.161 - - - 403 BYPASS - - [29/Jul/2026:07:41:07 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161" 194.5.48.175 - - - 403 BYPASS - - [29/Jul/2026:07:41:08 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.175, 194.5.48.175, 194.5.48.175, 194.5.48.175" 194.5.48.161 - - - 403 BYPASS - - [29/Jul/2026:07:41:08 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:07:41:08 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:42:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785310929.3980879783630371093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.158 - - - 200 BYPASS - - [29/Jul/2026:07:42:10 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.158, 195.250.23.158, 195.250.23.158, 195.250.23.158" 195.250.23.158 - _uid=0100007FD2AE696A8BF0B71F02CA3103 - 500 BYPASS - - [29/Jul/2026:07:42:10 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.158, 195.250.23.158, 195.250.23.158, 195.250.23.158" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:46:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785311212.9815299510955810546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:07:46:53 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007FEDAF696A92F0672002161403 - 500 BYPASS - - [29/Jul/2026:07:46:54 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 54.39.136.3 - - - 200 BYPASS - - [29/Jul/2026:07:52:56 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "54.39.136.3, 54.39.136.3, 54.39.136.3, 54.39.136.3" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:51 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:52 +0000] "GET /av.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:52 +0000] "GET /mini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:52 +0000] "GET /aa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:53 +0000] "GET /w.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:53 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:07:59:53 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:53 +0000] "GET /m.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:07:59:54 +0000] "GET /wp-admin/css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:07:59:54 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:54 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:55 +0000] "GET /gmo.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:07:59:55 +0000] "GET /wp-content/languages/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:55 +0000] "GET /wp-the.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:55 +0000] "GET /404.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:56 +0000] "GET /init.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:56 +0000] "GET /file5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:07:59:56 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:56 +0000] "GET /shell.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:57 +0000] "GET /f35.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:07:59:57 +0000] "GET /new.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:07:59:57 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:59:58 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=9ad90283e6 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:59:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785311999.0744600296020507812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.202.44.182 - - - 302 BYPASS - - [29/Jul/2026:07:59:59 +0000] "GET /wp-admin/ HTTP/1.1" 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:00 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:00 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:01 +0000] "GET /admin/controller/extension/ HTTP/1.1" 14798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:01 +0000] "GET /file.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:01 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:02 +0000] "GET /bolt.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:02 +0000] "GET /3.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:02 +0000] "GET /222.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:02 +0000] "GET /wp-admin/images/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:03 +0000] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:03 +0000] "GET /wp-includes/Requests/library/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:03 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:04 +0000] "GET /wp-configs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:04 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:04 +0000] "GET /wp-includes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:05 +0000] "GET /wp-admin/a.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:05 +0000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:05 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:06 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:06 +0000] "GET /wp-admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:06 +0000] "GET /size.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:06 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:07 +0000] "GET /403.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:07 +0000] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:07 +0000] "GET /as.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:08 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:08 +0000] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:08 +0000] "GET /plugins.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:08 +0000] "GET /wp-includes/js/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:09 +0000] "GET /go.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:09 +0000] "GET /test1.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:09 +0000] "GET /wp-admin/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:09 +0000] "GET /images/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:10 +0000] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:10 +0000] "GET /asd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:10 +0000] "GET /wp-includes/customize/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:11 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:11 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:11 +0000] "GET /wp-includes/html-api/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:11 +0000] "GET /wp-admin/js/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:12 +0000] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:12 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:12 +0000] "GET /wp-includes/blocks/block/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:13 +0000] "GET /wp-includes/rest-api/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:13 +0000] "GET /inputs.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:13 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 302 BYPASS - - [29/Jul/2026:08:00:14 +0000] "GET /wp-admin/network/index.php HTTP/1.1" 610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:14 +0000] "GET /wp-content/1.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:15 +0000] "GET /plugin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:15 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:15 +0000] "GET /gg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:15 +0000] "GET /wp-includes/images/crystal/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:16 +0000] "GET /wp.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:16 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:16 +0000] "GET /wp-admin/file.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 302 BYPASS - - [29/Jul/2026:08:00:17 +0000] "GET /wp-admin/user/index.php HTTP/1.1" 607 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:18 +0000] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 14798 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:18 +0000] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:18 +0000] "GET /index/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:19 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:19 +0000] "GET /wp-includes/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:19 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:20 +0000] "GET /getid3-core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:20 +0000] "GET /adminer.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:20 +0000] "GET /wp-content/uploads/2024/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:20 +0000] "GET /alfa.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:21 +0000] "GET /wp-content/uploads/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:21 +0000] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:21 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:21 +0000] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:22 +0000] "GET /edit.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:22 +0000] "GET /wp-includes/block-supports/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:22 +0000] "GET /wp-content/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:23 +0000] "GET /sf.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:23 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:23 +0000] "GET /wso.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:24 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:24 +0000] "GET /file56.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:24 +0000] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:08:00:24 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:25 +0000] "GET /wp-content/edit.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:25 +0000] "GET /2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:25 +0000] "GET /wp-content/uploads/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:26 +0000] "GET /mah.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:26 +0000] "GET /send.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:26 +0000] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:27 +0000] "GET /wp-includes/js/crop/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:08:00:27 +0000] "GET /about.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:27 +0000] "GET /options.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:08:00:27 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:28 +0000] "GET /wp-file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:08:00:28 +0000] "GET /sid3.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:01:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785312094.0073459148406982421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 156.244.46.207 - - - 200 BYPASS - - [29/Jul/2026:08:01:34 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 156.244.46.207, 156.244.46.207, 156.244.46.207" 156.244.46.207 - _uid=0100007F5EB3696A8BF0B71F02E53903 - 500 BYPASS - - [29/Jul/2026:08:01:42 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 156.244.46.207, 156.244.46.207, 156.244.46.207" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:04:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785312259.1205909252166748046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:08:04:19 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F03B4696A92F0672002471903 - 500 BYPASS - - [29/Jul/2026:08:04:20 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:18:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785313087.4845190048217773437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 202.51.202.242 - - - 200 BYPASS - - [29/Jul/2026:08:18:08 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "202.51.202.242, 202.51.202.242, 202.51.202.242, 202.51.202.242" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:27:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785313630.9968481063842773437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 152.53.111.131 - - - 200 BYPASS - - [29/Jul/2026:08:27:11 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 152.53.111.131 - _uid=0100007F5FB9696A8BF0B71F02DD4B03 - 500 BYPASS - - [29/Jul/2026:08:27:12 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 65.98.12.5 - - - 200 BYPASS - - [29/Jul/2026:08:27:24 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.5, 65.98.12.5, 65.98.12.5, 65.98.12.5" 65.98.12.5 - _uid=0100007F6CB9696A92F0672002E02103 - 500 BYPASS - - [29/Jul/2026:08:27:25 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.5, 65.98.12.5, 65.98.12.5, 65.98.12.5" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:35:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785314122.9230558872222900390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 15.204.206.156 - - - 200 BYPASS - - [29/Jul/2026:08:35:23 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "15.204.206.156, 15.204.206.156, 15.204.206.156, 15.204.206.156" 15.204.206.156 - _uid=0100007F4BBB696A8BF0B71F02C25203 - 500 BYPASS - - [29/Jul/2026:08:35:24 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "15.204.206.156, 15.204.206.156, 15.204.206.156, 15.204.206.156" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:41:32 +0000] "POST /wp-cron.php?doing_wp_cron=1785314491.9434869289398193359375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:08:41:32 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007FBCBC696A8BF0B71F02115803 - 500 BYPASS - - [29/Jul/2026:08:41:33 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:08:42:28 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 198.38.94.67 - _uid=0100007FF4BC696A8BF0B71F02CC5803 - 500 BYPASS - - [29/Jul/2026:08:42:29 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:51:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785315076.2231678962707519531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:08:51:16 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 195.250.23.54 - _uid=0100007F04BF696A8BF0B71F022F5F03 - 500 BYPASS - - [29/Jul/2026:08:51:17 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:06:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785315981.9112749099731445312500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 154.38.175.180 - - - 200 BYPASS - - [29/Jul/2026:09:06:22 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 154.38.175.180 - _uid=0100007F8EC2696A8BF0B71F02526303 - 500 BYPASS - - [29/Jul/2026:09:06:31 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:08:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785316121.3126149177551269531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:09:08:42 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - _uid=0100007F1AC3696A92F0672002AF2C03 - 500 BYPASS - - [29/Jul/2026:09:08:42 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:17:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785316636.6880979537963867187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:09:17:17 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F1DC5696A8BF0B71F022E6503 - 500 BYPASS - - [29/Jul/2026:09:17:18 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 41.76.213.235 - - - 200 BYPASS - - [29/Jul/2026:09:18:07 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "41.76.213.235, 41.76.213.235, 41.76.213.235, 41.76.213.235" 41.76.213.235 - _uid=0100007F4FC5696A8BF0B71F024E6503 - 500 BYPASS - - [29/Jul/2026:09:18:08 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "41.76.213.235, 41.76.213.235, 41.76.213.235, 41.76.213.235" 148.113.130.9 - - - 200 BYPASS - - [29/Jul/2026:09:22:34 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "148.113.130.9, 148.113.130.9, 148.113.130.9, 148.113.130.9" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:34:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785317697.9548308849334716796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 158.106.137.107 - - - 200 BYPASS - - [29/Jul/2026:09:34:58 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 158.106.137.107 - _uid=0100007F42C9696A8BF0B71F026F6803 - 500 BYPASS - - [29/Jul/2026:09:34:59 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:44:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785318295.3235280513763427734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.90.234.13 - - - 200 BYPASS - - [29/Jul/2026:09:44:56 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.90.234.13, 103.90.234.13, 103.90.234.13, 103.90.234.13" 103.90.234.13 - _uid=0100007F98CB696A8BF0B71F02276A03 - 500 BYPASS - - [29/Jul/2026:09:44:57 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.90.234.13, 103.90.234.13, 103.90.234.13, 103.90.234.13" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:48:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785318495.8238608837127685546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:09:48:16 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 195.130.35.148 - _uid=0100007F60CC696A8BF0B71F02226B03 - 500 BYPASS - - [29/Jul/2026:09:48:17 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:54:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785318875.0073208808898925781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.240.77 - - - 200 BYPASS - - [29/Jul/2026:09:54:35 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 167.71.240.77 - _uid=0100007FDBCD696A8BF0B71F02976C03 - 500 BYPASS - - [29/Jul/2026:09:54:36 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:17:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785320257.2378189563751220703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.229.42 - - - 200 BYPASS - - [29/Jul/2026:10:17:37 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.229.42, 192.250.229.42, 192.250.229.42, 192.250.229.42" 192.250.229.42 - _uid=0100007F41D3696A8BF0B71F02FC7003 - 500 BYPASS - - [29/Jul/2026:10:17:38 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.229.42, 192.250.229.42, 192.250.229.42, 192.250.229.42" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:10:19:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 194.5.48.218 - - - 403 BYPASS - - [29/Jul/2026:10:19:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.218, 194.5.48.218, 194.5.48.218, 194.5.48.218" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:10:19:22 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 194.5.48.209 - - - 403 BYPASS - - [29/Jul/2026:10:19:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.209, 194.5.48.209, 194.5.48.209, 194.5.48.209" 43.153.58.28 - - - 200 MISS - - [29/Jul/2026:10:22:17 +0000] "GET / HTTP/1.1" 18345 "http://findredlightnearme.com" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.153.58.28, 43.153.58.28, 43.153.58.28, 43.153.58.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:22:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785320536.4069759845733642578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:26:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785320766.1866540908813476562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 41.76.213.235 - - - 200 BYPASS - - [29/Jul/2026:10:26:06 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "41.76.213.235, 41.76.213.235, 41.76.213.235, 41.76.213.235" 41.76.213.235 - _uid=0100007F3ED5696A8BF0B71F02207303 - 500 BYPASS - - [29/Jul/2026:10:26:07 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "41.76.213.235, 41.76.213.235, 41.76.213.235, 41.76.213.235" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:31:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785321088.3427209854125976562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.233.145.195 - - - 200 BYPASS - - [29/Jul/2026:10:31:28 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.233.145.195, 167.233.145.195, 167.233.145.195, 167.233.145.195" 167.233.145.195 - _uid=0100007F80D6696A8BF0B71F023D7403 - 500 BYPASS - - [29/Jul/2026:10:31:29 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.233.145.195, 167.233.145.195, 167.233.145.195, 167.233.145.195" 167.172.93.1 - - - 200 BYPASS - - [29/Jul/2026:10:43:21 +0000] "GET /license.txt HTTP/1.1" 227 "-" "python-requests/2.27.1" "167.172.93.1, 167.172.93.1, 167.172.93.1, 167.172.93.1" 167.172.93.1 - - - 200 BYPASS - - [29/Jul/2026:10:43:23 +0000] "GET /license.txt HTTP/1.1" 227 "-" "python-requests/2.27.1" "167.172.93.1, 167.172.93.1, 167.172.93.1, 167.172.93.1" 51.161.37.243 - - - 200 BYPASS - - [29/Jul/2026:10:47:52 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "51.161.37.243, 51.161.37.243, 51.161.37.243, 51.161.37.243" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:52:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785322321.6565570831298828125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 5.135.39.194 - - - 200 BYPASS - - [29/Jul/2026:10:52:02 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.135.39.194, 5.135.39.194, 5.135.39.194, 5.135.39.194" 5.135.39.194 - _uid=0100007F52DB696A92F06720027A3903 - 500 BYPASS - - [29/Jul/2026:10:52:02 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.135.39.194, 5.135.39.194, 5.135.39.194, 5.135.39.194" 194.5.48.161 - - - 403 BYPASS - - [29/Jul/2026:11:01:02 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:11:01:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:11:01:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:08:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785323326.1395759582519531250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 98.70.32.248 - - - 200 BYPASS - - [29/Jul/2026:11:08:46 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "98.70.32.248, 98.70.32.248, 98.70.32.248, 98.70.32.248" 98.70.32.248 - _uid=0100007F3EDF696A8BF0B71F02907C03 - 500 BYPASS - - [29/Jul/2026:11:08:56 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "98.70.32.248, 98.70.32.248, 98.70.32.248, 98.70.32.248" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:11:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785323482.8952560424804687500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:11:11:23 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007FDBDF696A92F0672002C43B03 - 500 BYPASS - - [29/Jul/2026:11:11:24 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:16:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785323776.6474299430847167968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.135.183.82 - - - 200 MISS - - [29/Jul/2026:11:16:17 +0000] "GET /x/ HTTP/1.1" 15856 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.135.183.82, 43.135.183.82, 43.135.183.82, 43.135.183.82" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:21:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785324103.2265729904174804687500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:11:21:43 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007F47E2696A8BF0B71F02187F03 - 500 BYPASS - - [29/Jul/2026:11:21:44 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:30:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785324617.9482851028442382812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.255.209.92 - - - 200 BYPASS - - [29/Jul/2026:11:30:18 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.255.209.92, 172.255.209.92, 172.255.209.92, 172.255.209.92" 172.255.209.92 - _uid=0100007F4AE4696A8BF0B71F02BA8003 - 500 BYPASS - - [29/Jul/2026:11:30:19 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.255.209.92, 172.255.209.92, 172.255.209.92, 172.255.209.92" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:34:33 +0000] "POST /wp-cron.php?doing_wp_cron=1785324872.3746480941772460937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:11:34:33 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F49E5696A8BF0B71F02698103 - 500 BYPASS - - [29/Jul/2026:11:34:34 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:35:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785324952.3677620887756347656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 101.32.208.70 - - - 404 MISS - - [29/Jul/2026:11:35:52 +0000] "GET /a26abb4f-62e1-432e-a9c7-fc5e69dc740e/ HTTP/1.1" 14781 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "101.32.208.70, 101.32.208.70, 101.32.208.70, 101.32.208.70" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:40:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785325257.1392040252685546875000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.54.134.42 - - - 200 BYPASS - - [29/Jul/2026:11:40:57 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.54.134.42, 20.54.134.42, 20.54.134.42, 20.54.134.42" 20.54.134.42 - _uid=0100007FC9E6696A8BF0B71F02908203 - 500 BYPASS - - [29/Jul/2026:11:40:58 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "20.54.134.42, 20.54.134.42, 20.54.134.42, 20.54.134.42" 43.164.3.182 - - - 301 MISS - - [29/Jul/2026:11:45:33 +0000] "GET /?p=690 HTTP/1.1" 396 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.164.3.182, 43.164.3.182, 43.164.3.182, 43.164.3.182" 103.190.45.95 - - - 403 BYPASS - - [29/Jul/2026:11:47:42 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "103.190.45.95, 103.190.45.95, 103.190.45.95, 103.190.45.95" 103.190.45.95 - - - 403 BYPASS - - [29/Jul/2026:11:47:42 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "103.190.45.95, 103.190.45.95, 103.190.45.95, 103.190.45.95" 103.190.45.95 - - - 403 BYPASS - - [29/Jul/2026:11:47:42 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "103.190.45.95, 103.190.45.95, 103.190.45.95, 103.190.45.95" 103.190.45.95 - - - 403 BYPASS - - [29/Jul/2026:11:47:42 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "103.190.45.95, 103.190.45.95, 103.190.45.95, 103.190.45.95" 105.156.69.111 - - - 404 MISS - - [29/Jul/2026:11:48:07 +0000] "GET /x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - - - 404 MISS - - [29/Jul/2026:11:48:11 +0000] "GET /alfa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F14B3696A92F0672002191803 - 404 MISS - - [29/Jul/2026:11:48:16 +0000] "GET /c99.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F8213696A6022FC3A020DD503 - 404 HIT - - [29/Jul/2026:11:48:21 +0000] "GET /mini.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF8B2696A8BF0B71F02B13803 - 404 MISS - - [29/Jul/2026:11:48:27 +0000] "GET /a.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF8B2696A8BF0B71F02B13803 - 404 HIT - - [29/Jul/2026:11:48:29 +0000] "GET /wso.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F17B3696A92F06720021F1803 - 404 MISS - - [29/Jul/2026:11:48:41 +0000] "GET /home.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FAC13696A6022FC3A0241D503 - 404 MISS - - [29/Jul/2026:11:48:45 +0000] "GET /shell.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFCB2696A8BF0B71F02C43803 - 404 MISS - - [29/Jul/2026:11:48:47 +0000] "GET /leaf.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:48:50 +0000] "GET /wp-admin.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:48:53 +0000] "GET /leafmailer2.8.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:49:16 +0000] "GET /alex.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:49:18 +0000] "GET /uploader.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:49:24 +0000] "GET /mailer.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:49:28 +0000] "GET /anone.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 HIT - - [29/Jul/2026:11:49:34 +0000] "GET /a.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 MISS - - [29/Jul/2026:11:49:41 +0000] "GET /wp-configer.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC613696A6022FC3A025BD503 - 404 HIT - - [29/Jul/2026:11:49:45 +0000] "GET /alfa.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F7BE8696A8BF0B71F02C28303 - 404 HIT - - [29/Jul/2026:11:49:47 +0000] "GET /wso.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F7BE8696A8BF0B71F02C28303 - 404 MISS - - [29/Jul/2026:11:49:53 +0000] "GET /c.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F7BE8696A8BF0B71F02C28303 - 404 MISS - - [29/Jul/2026:11:49:58 +0000] "GET /1.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F0FB3696A8BF0B71F02133903 - 404 HIT - - [29/Jul/2026:11:50:00 +0000] "GET /send.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F1AB3696A8BF0B71F02433903 - 404 MISS - - [29/Jul/2026:11:50:02 +0000] "GET /3.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F02B3696A92F0672002E91703 - 404 MISS - - [29/Jul/2026:11:50:06 +0000] "GET /404.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:07 +0000] "GET /sym.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:12 +0000] "GET /wp-confirm.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:16 +0000] "GET /images/vuln.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:18 +0000] "GET /dr.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:27 +0000] "GET /upload.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:31 +0000] "GET /bypass.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:38 +0000] "GET /wp-blog.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:42 +0000] "GET /data.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:45 +0000] "GET /owl.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:47 +0000] "GET /vuln.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:50 +0000] "GET /symlink.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:50:55 +0000] "GET /ohayo.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBB2696A8BF0B71F02C23803 - 404 MISS - - [29/Jul/2026:11:51:01 +0000] "GET /100.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F9E16696A6022FC3A0251D803 - 404 MISS - - [29/Jul/2026:11:51:06 +0000] "GET /777.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F9E16696A6022FC3A0251D803 - 403 BYPASS - - [29/Jul/2026:11:51:10 +0000] "GET /wp-content/wp-logins.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F9E16696A6022FC3A0251D803 - 404 MISS - - [29/Jul/2026:11:51:37 +0000] "GET /1index.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 MISS - - [29/Jul/2026:11:51:42 +0000] "GET /wp-wso.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 MISS - - [29/Jul/2026:11:51:46 +0000] "GET /2index.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 403 BYPASS - - [29/Jul/2026:11:51:49 +0000] "GET /wp-content/wp-admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 HIT - - [29/Jul/2026:11:51:53 +0000] "GET /wp-configer.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 HIT - - [29/Jul/2026:11:51:58 +0000] "GET /wp-admin.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 HIT - - [29/Jul/2026:11:52:01 +0000] "GET /mini.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 MISS - - [29/Jul/2026:11:52:04 +0000] "GET /old-index.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F188D696A8BF0B71F02131903 - 404 MISS - - [29/Jul/2026:11:52:08 +0000] "GET /doc.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F0B8D696A8BF0B71F02EC1803 - 404 MISS - - [29/Jul/2026:11:52:12 +0000] "GET /ups.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F0B8D696A8BF0B71F02EC1803 - 404 MISS - - [29/Jul/2026:11:52:16 +0000] "GET /shx.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F0B8D696A8BF0B71F02EC1803 - 404 MISS - - [29/Jul/2026:11:52:25 +0000] "GET /FoxWSO.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F0B8D696A8BF0B71F02EC1803 - 404 HIT - - [29/Jul/2026:11:52:31 +0000] "GET /x.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F77E8696A8BF0B71F02BF8303 - 404 MISS - - [29/Jul/2026:11:52:38 +0000] "GET /cms.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F77E8696A8BF0B71F02BF8303 - 404 MISS - - [29/Jul/2026:11:52:46 +0000] "GET /stindex.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F77E8696A8BF0B71F02BF8303 - 404 MISS - - [29/Jul/2026:11:52:52 +0000] "GET /wp-uploads.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F77E8696A8BF0B71F02BF8303 - 404 MISS - - [29/Jul/2026:11:52:55 +0000] "GET /autoload_classmap.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F108D696A8BF0B71F02001903 - 404 MISS - - [29/Jul/2026:11:52:58 +0000] "GET /Gel.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F108D696A8BF0B71F02001903 - 404 MISS - - [29/Jul/2026:11:53:05 +0000] "GET /defau1t.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F108D696A8BF0B71F02001903 - 404 MISS - - [29/Jul/2026:11:53:08 +0000] "GET /0byte.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F108D696A8BF0B71F02001903 - 404 MISS - - [29/Jul/2026:11:53:12 +0000] "GET /wp.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F10B3696A92F06720020A1803 - 404 MISS - - [29/Jul/2026:11:53:18 +0000] "GET /41.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - - - 404 MISS - - [29/Jul/2026:11:53:24 +0000] "GET /media-admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FB4E9696A8BF0B71F02CC8403 - 404 MISS - - [29/Jul/2026:11:53:33 +0000] "GET /4price.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - - - 404 MISS - - [29/Jul/2026:11:53:36 +0000] "GET /MARIJUANA.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 MISS - - [29/Jul/2026:11:53:41 +0000] "GET /marijuana.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 MISS - - [29/Jul/2026:11:53:45 +0000] "GET /f.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEC7686A6022FC3A02389B03 - 404 MISS - - [29/Jul/2026:11:53:52 +0000] "GET /.fk.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEC7686A6022FC3A02389B03 - 404 MISS - - [29/Jul/2026:11:54:04 +0000] "GET /wikindex.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEC7686A6022FC3A02389B03 - 404 MISS - - [29/Jul/2026:11:54:09 +0000] "GET /xox.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEC7686A6022FC3A02389B03 - 404 MISS - - [29/Jul/2026:11:54:12 +0000] "GET /o.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - - - 404 MISS - - [29/Jul/2026:11:54:14 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFDB2696A8BF0B71F02C73803 - 404 MISS - - [29/Jul/2026:11:54:23 +0000] "GET /3index.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFDB2696A8BF0B71F02C73803 - 404 MISS - - [29/Jul/2026:11:54:27 +0000] "GET /sindex.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFDB2696A8BF0B71F02C73803 - 404 MISS - - [29/Jul/2026:11:54:31 +0000] "GET /baindex.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFDB2696A8BF0B71F02C73803 - 404 MISS - - [29/Jul/2026:11:54:44 +0000] "GET /new-index.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:54:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785326085.7480630874633789062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 49.51.233.95 - - - 200 BYPASS - - [29/Jul/2026:11:54:46 +0000] "GET /wp-json/wp/v2/posts/690 HTTP/1.1" 1644 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "49.51.233.95, 49.51.233.95, 49.51.233.95, 49.51.233.95" 105.156.69.111 - _uid=0100007FFDB2696A8BF0B71F02C73803 - 404 MISS - - [29/Jul/2026:11:54:51 +0000] "GET /wi.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF1C7686A6022FC3A02099B03 - 404 MISS - - [29/Jul/2026:11:54:55 +0000] "GET /XxX.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF1C7686A6022FC3A02099B03 - 404 MISS - - [29/Jul/2026:11:54:58 +0000] "GET /mar.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F05C8686A6022FC3A024E9B03 - 404 MISS - - [29/Jul/2026:11:55:04 +0000] "GET /root.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - - - 404 MISS - - [29/Jul/2026:11:55:19 +0000] "GET /11index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 200 BYPASS - - [29/Jul/2026:11:55:25 +0000] "GET /wp-login.php HTTP/1.1" 2663 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 MISS - - [29/Jul/2026:11:55:29 +0000] "GET /nee.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 MISS - - [29/Jul/2026:11:55:36 +0000] "GET /v.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F02C8686A5D222E3B02C21F03 - 404 MISS - - [29/Jul/2026:11:55:40 +0000] "GET /z.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F02C8686A5D222E3B02C21F03 - 404 MISS - - [29/Jul/2026:11:55:45 +0000] "GET /xx.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F1A8D696A8BF0B71F021A1903 - 404 MISS - - [29/Jul/2026:11:55:51 +0000] "GET /g.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F2C5F696A8BF0B71F02C50603 - 404 MISS - - [29/Jul/2026:11:55:53 +0000] "GET /m.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF9B2696A8BF0B71F02B43803 - 404 HIT - - [29/Jul/2026:11:56:00 +0000] "GET /shell.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF9B2696A8BF0B71F02B43803 - 404 MISS - - [29/Jul/2026:11:56:04 +0000] "GET /sh3ll.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF9B2696A8BF0B71F02B43803 - 404 HIT - - [29/Jul/2026:11:56:12 +0000] "GET /c99.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF9B2696A8BF0B71F02B43803 - 404 MISS - - [29/Jul/2026:11:56:17 +0000] "GET /alexuse.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF9B2696A8BF0B71F02B43803 - 404 MISS - - [29/Jul/2026:11:56:27 +0000] "GET /w.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FF9B2696A92F0672002D41703 - 404 MISS - - [29/Jul/2026:11:56:31 +0000] "GET /ws.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F168D696A8BF0B71F020F1903 - 404 HIT - - [29/Jul/2026:11:56:40 +0000] "GET /2.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F19B3696A8BF0B71F023E3903 - 404 MISS - - [29/Jul/2026:11:56:45 +0000] "GET /lol.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F19B3696A8BF0B71F023E3903 - 404 MISS - - [29/Jul/2026:11:56:50 +0000] "GET /87.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:56:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785326218.1900401115417480468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 97.74.87.194 - - - 200 BYPASS - - [29/Jul/2026:11:56:58 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.87.194, 97.74.87.194, 97.74.87.194, 97.74.87.194" 97.74.87.194 - _uid=0100007F8AEA696A8BF0B71F02328503 - 500 BYPASS - - [29/Jul/2026:11:56:59 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.87.194, 97.74.87.194, 97.74.87.194, 97.74.87.194" 105.156.69.111 - _uid=0100007F19B3696A8BF0B71F023E3903 - 404 MISS - - [29/Jul/2026:11:57:02 +0000] "GET /7yn.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F19B3696A8BF0B71F023E3903 - 403 BYPASS - - [29/Jul/2026:11:57:06 +0000] "GET /wp-content/marijuana.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F19B3696A8BF0B71F023E3903 - 404 MISS - - [29/Jul/2026:11:57:09 +0000] "GET /haxor.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F19B3696A8BF0B71F023E3903 - 404 MISS - - [29/Jul/2026:11:57:18 +0000] "GET /403.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07B3696A8BF0B71F02F23803 - 404 MISS - - [29/Jul/2026:11:57:21 +0000] "GET /13.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07B3696A8BF0B71F02F23803 - 403 BYPASS - - [29/Jul/2026:11:57:24 +0000] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07B3696A8BF0B71F02F23803 - 404 MISS - - [29/Jul/2026:11:57:31 +0000] "GET /cpanel.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07B3696A8BF0B71F02F23803 - 404 MISS - - [29/Jul/2026:11:57:34 +0000] "GET /upload/fw HTTP/1.1" 14693 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:59:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785326364.0492749214172363281250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:11:59:24 +0000] "GET /wp-login.php HTTP/1.1" 2751 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F1CEB696A8BF0B71F02768503 - 500 BYPASS - - [29/Jul/2026:11:59:25 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:03:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785326619.6870310306549072265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:12:03:40 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007F1CEC696A8BF0B71F02D18503 - 500 BYPASS - - [29/Jul/2026:12:03:41 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:06:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785326781.8375649452209472656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.130.39.254 - - - 200 MISS - - [29/Jul/2026:12:06:22 +0000] "GET /red-light-therapy-finder/embed/ HTTP/1.1" 6752 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.130.39.254, 43.130.39.254, 43.130.39.254, 43.130.39.254" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:10:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785327033.5784609317779541015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.241.143.148 - - - 200 BYPASS - - [29/Jul/2026:12:10:34 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 192.241.143.148 - _uid=0100007FBAED696A8BF0B71F02758603 - 500 BYPASS - - [29/Jul/2026:12:10:34 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 167.71.240.77 - - - 200 BYPASS - - [29/Jul/2026:12:11:08 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 167.71.240.77 - _uid=0100007FDCED696A8BF0B71F02958603 - 500 BYPASS - - [29/Jul/2026:12:11:09 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:38 +0000] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:39 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:15:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785327339.9352040290832519531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:40 +0000] "GET /assets/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:40 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:41 +0000] "GET /term.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:41 +0000] "GET /config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:12:15:41 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:41 +0000] "GET /wp-good.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:42 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 129.226.146.146 - - - 200 BYPASS - - [29/Jul/2026:12:15:42 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffindredlightnearme.com%2Fx%2F&format=xml HTTP/1.1" 2969 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "129.226.146.146, 129.226.146.146, 129.226.146.146, 129.226.146.146" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:42 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:15:42 +0000] "GET /x.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:42 +0000] "GET /goods.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:43 +0000] "GET /wp-access.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:43 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:43 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:43 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:44 +0000] "GET /bthil.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:44 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:44 +0000] "GET /wp-admin/includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:44 +0000] "GET /cv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:45 +0000] "GET /wp-content/packed.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:45 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:12:15:45 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:45 +0000] "GET /core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:46 +0000] "GET /admin/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:46 +0000] "GET /admin/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:46 +0000] "GET /storage/rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:46 +0000] "GET /ahax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:47 +0000] "GET /zoom1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:47 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:15:48 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=d09d31b359 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.202.44.182 - - - 302 BYPASS - - [29/Jul/2026:12:15:48 +0000] "GET /wp-admin/network/ HTTP/1.1" 601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:48 +0000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:49 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:49 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 302 BYPASS - - [29/Jul/2026:12:15:50 +0000] "GET /wp-admin/index.php HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:50 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:50 +0000] "GET /item.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:50 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:51 +0000] "GET /i.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:51 +0000] "GET /deepseek_d.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:51 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:52 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:52 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:52 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:52 +0000] "GET /assets/images/doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:52 +0000] "GET /bgymj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:53 +0000] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:53 +0000] "GET /images/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 200 MISS - - [29/Jul/2026:12:15:54 +0000] "GET /wp-load.php HTTP/1.1" 383 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:15:54 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:15:55 +0000] "GET /a.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:55 +0000] "GET /u.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:55 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:15:55 +0000] "GET /wp-blog.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:56 +0000] "GET /xxx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:56 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:57 +0000] "GET /vendor/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:57 +0000] "GET /tool.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:58 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:58 +0000] "GET /k.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:15:58 +0000] "GET /root.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:15:58 +0000] "GET /ws.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:59 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:59 +0000] "GET /elp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:59 +0000] "GET /a1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:15:59 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:00 +0000] "GET /alfa-rex.php7 HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:12:16:00 +0000] "GET /wp-admin/css/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:01 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:01 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:16:01 +0000] "GET /upload.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:01 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:02 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:02 +0000] "GET /wp-content/file.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:02 +0000] "GET /files.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:16:03 +0000] "GET /o.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:03 +0000] "GET /file2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:03 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:03 +0000] "GET /xda.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:04 +0000] "GET /theme.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:04 +0000] "GET //classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:04 +0000] "GET /news.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:04 +0000] "GET /about/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 302 BYPASS - - [29/Jul/2026:12:16:05 +0000] "GET /wp-admin/user/ HTTP/1.1" 598 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:05 +0000] "GET /wp-includes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:05 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:06 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:06 +0000] "GET /wp-conflg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:06 +0000] "GET /123.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:06 +0000] "GET /yanz.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:12:16:07 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:07 +0000] "GET /bi.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:07 +0000] "GET /cc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:07 +0000] "GET /files/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:08 +0000] "GET /1.php7 HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:08 +0000] "GET /disagraeosc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:09 +0000] "GET /wp-logs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:12:16:09 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:09 +0000] "GET /system_log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:09 +0000] "GET /24.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:10 +0000] "GET /wp-admin/maint/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:10 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:11 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 14800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:11 +0000] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 BYPASS - - [29/Jul/2026:12:16:11 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:12 +0000] "GET /num.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:12 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:13 +0000] "GET /wp-content/et-cache/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:13 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:13 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:13 +0000] "GET /gifclass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:14 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:14 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:14 +0000] "GET /css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 200 MISS - - [29/Jul/2026:12:16:14 +0000] "GET /wp-cron.php HTTP/1.1" 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:15 +0000] "GET /wp-block.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:12:16:15 +0000] "GET /wp-includes/fonts/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 BYPASS - - [29/Jul/2026:12:16:15 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:20:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785327635.9629249572753906250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.98.54.3 - - - 207 BYPASS - - [29/Jul/2026:12:20:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339404 "-" "wp2shell_v2" "198.98.54.3, 198.98.54.3, 198.98.54.3, 198.98.54.3" 198.98.54.3 - - - 207 BYPASS - - [29/Jul/2026:12:20:37 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339434 "-" "wp2shell_v2" "198.98.54.3, 198.98.54.3, 198.98.54.3, 198.98.54.3" 198.98.54.3 - - - 207 BYPASS - - [29/Jul/2026:12:20:40 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339405 "-" "wp2shell_v2" "198.98.54.3, 198.98.54.3, 198.98.54.3, 198.98.54.3" 173.239.216.243 - - - 404 MISS - - [29/Jul/2026:12:20:58 +0000] "GET /archivarix.cms.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "173.239.216.243, 173.239.216.243, 173.239.216.243, 173.239.216.243" 54.39.136.143 - - - 200 BYPASS - - [29/Jul/2026:12:22:44 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "54.39.136.143, 54.39.136.143, 54.39.136.143, 54.39.136.143" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:23:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785327783.8028240203857421875000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:12:23:04 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007FA8F0696A8BF0B71F02D18803 - 500 BYPASS - - [29/Jul/2026:12:23:05 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:24:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785327852.5583190917968750000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:12:24:13 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FEDF0696A92F0672002324003 - 500 BYPASS - - [29/Jul/2026:12:24:13 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:26:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785327978.9781110286712646484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.135.172.89 - - - 200 BYPASS - - [29/Jul/2026:12:26:19 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffindredlightnearme.com%2Fx%2F HTTP/1.1" 1773 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.135.172.89, 43.135.172.89, 43.135.172.89, 43.135.172.89" 43.161.234.148 - - - 404 HIT - - [29/Jul/2026:12:35:29 +0000] "GET /a26abb4f-62e1-432e-a9c7-fc5e69dc740e/ HTTP/1.1" 14780 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.161.234.148, 43.161.234.148, 43.161.234.148, 43.161.234.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:46:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785329163.6278800964355468750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.157.95.239 - - - 200 MISS - - [29/Jul/2026:12:46:04 +0000] "GET /x/embed/ HTTP/1.1" 6753 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.157.95.239, 43.157.95.239, 43.157.95.239, 43.157.95.239" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:49:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785329375.9257531166076660156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 184.168.124.4 - - - 200 BYPASS - - [29/Jul/2026:12:49:36 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.124.4, 184.168.124.4, 184.168.124.4, 184.168.124.4" 184.168.124.4 - _uid=0100007FE0F6696A8BF0B71F02D18C03 - 500 BYPASS - - [29/Jul/2026:12:49:37 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.124.4, 184.168.124.4, 184.168.124.4, 184.168.124.4" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:52:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785329553.9954841136932373046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 94.130.11.28 - - - 200 BYPASS - - [29/Jul/2026:12:52:34 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 94.130.11.28 - _uid=0100007F92F7696A8BF0B71F02338D03 - 500 BYPASS - - [29/Jul/2026:12:52:35 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "94.130.11.28, 94.130.11.28, 94.130.11.28, 94.130.11.28" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:17:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785331026.0677618980407714843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:13:17:06 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007F52FD696A8BF0B71F02A18F03 - 500 BYPASS - - [29/Jul/2026:13:17:07 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:21:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785331277.4728479385375976562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 158.106.137.107 - - - 200 BYPASS - - [29/Jul/2026:13:21:18 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 158.106.137.107 - _uid=0100007F4EFE696A8BF0B71F020C9003 - 500 BYPASS - - [29/Jul/2026:13:21:19 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.106.137.107, 158.106.137.107, 158.106.137.107, 158.106.137.107" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:33:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785332039.0804240703582763671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 190.92.174.81 - - - 200 BYPASS - - [29/Jul/2026:13:33:59 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.81, 190.92.174.81, 190.92.174.81, 190.92.174.81" 190.92.174.81 - _uid=0100007F47016A6A8BF0B71F02569203 - 500 BYPASS - - [29/Jul/2026:13:34:00 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.81, 190.92.174.81, 190.92.174.81, 190.92.174.81" 103.76.88.36 - - - 404 MISS - - [29/Jul/2026:13:34:31 +0000] "GET /.env HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "103.76.88.36, 103.76.88.36, 103.76.88.36, 103.76.88.36" 105.156.69.111 - - - 404 HIT - - [29/Jul/2026:13:46:36 +0000] "GET /x.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:46:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785332802.8368170261383056640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.172.73.193 - - - 200 BYPASS - - [29/Jul/2026:13:46:43 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.172.73.193, 167.172.73.193, 167.172.73.193, 167.172.73.193" 105.156.69.111 - _uid=0100007FEEEE696A8BF0B71F026A8703 - 404 HIT - - [29/Jul/2026:13:46:45 +0000] "GET /alfa.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FEEEE696A8BF0B71F026A8703 - 404 HIT - - [29/Jul/2026:13:46:48 +0000] "GET /c99.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FEEEE696A8BF0B71F026A8703 - 404 MISS - - [29/Jul/2026:13:46:54 +0000] "GET /mini.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FEEEE696A8BF0B71F026A8703 - 404 HIT - - [29/Jul/2026:13:46:56 +0000] "GET /a.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 MISS - - [29/Jul/2026:13:47:02 +0000] "GET /wso.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:06 +0000] "GET /home.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:09 +0000] "GET /shell.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:12 +0000] "GET /leaf.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:15 +0000] "GET /wp-admin.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:17 +0000] "GET /leafmailer2.8.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:28 +0000] "GET /alex.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:36 +0000] "GET /uploader.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:39 +0000] "GET /mailer.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:47:44 +0000] "GET /anone.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:01 +0000] "GET /wp-configer.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:03 +0000] "GET /alfa.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:13 +0000] "GET /wso.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:19 +0000] "GET /c.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:25 +0000] "GET /1.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 MISS - - [29/Jul/2026:13:48:31 +0000] "GET /send.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:40 +0000] "GET /3.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:42 +0000] "GET /404.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:48 +0000] "GET /sym.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:52 +0000] "GET /wp-confirm.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:54 +0000] "GET /images/vuln.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:48:57 +0000] "GET /dr.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFBEE696A8BF0B71F02918703 - 404 HIT - - [29/Jul/2026:13:49:01 +0000] "GET /upload.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:03 +0000] "GET /bypass.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:05 +0000] "GET /wp-blog.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:09 +0000] "GET /data.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:13 +0000] "GET /owl.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:49:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785332957.5186600685119628906250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.133.214.160 - - - 200 BYPASS - - [29/Jul/2026:13:49:18 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.214.160, 103.133.214.160, 103.133.214.160, 103.133.214.160" 103.133.214.160 - _uid=0100007FDE046A6A8BF0B71F02B19303 - 500 BYPASS - - [29/Jul/2026:13:49:19 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.133.214.160, 103.133.214.160, 103.133.214.160, 103.133.214.160" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:20 +0000] "GET /vuln.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:22 +0000] "GET /symlink.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:25 +0000] "GET /ohayo.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:29 +0000] "GET /100.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:31 +0000] "GET /777.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 403 BYPASS - - [29/Jul/2026:13:49:36 +0000] "GET /wp-content/wp-logins.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:38 +0000] "GET /1index.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:41 +0000] "GET /wp-wso.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:44 +0000] "GET /2index.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 403 BYPASS - - [29/Jul/2026:13:49:46 +0000] "GET /wp-content/wp-admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:50 +0000] "GET /wp-configer.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:54 +0000] "GET /wp-admin.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:49:58 +0000] "GET /mini.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:50:03 +0000] "GET /old-index.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:50:05 +0000] "GET /doc.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:50:12 +0000] "GET /ups.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:50:16 +0000] "GET /shx.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:50:18 +0000] "GET /FoxWSO.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F01EF696A8BF0B71F02A58703 - 404 HIT - - [29/Jul/2026:13:50:20 +0000] "GET /x.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F3C046A6A92F0672002854203 - 404 HIT - - [29/Jul/2026:13:50:27 +0000] "GET /cms.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F3C046A6A92F0672002854203 - 404 HIT - - [29/Jul/2026:13:50:29 +0000] "GET /stindex.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F3C046A6A92F0672002854203 - 404 HIT - - [29/Jul/2026:13:50:30 +0000] "GET /wp-uploads.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F3C046A6A92F0672002854203 - 404 HIT - - [29/Jul/2026:13:50:33 +0000] "GET /autoload_classmap.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07EF696A8BF0B71F02B88703 - 404 HIT - - [29/Jul/2026:13:50:39 +0000] "GET /Gel.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07EF696A8BF0B71F02B88703 - 404 HIT - - [29/Jul/2026:13:50:42 +0000] "GET /defau1t.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07EF696A8BF0B71F02B88703 - 404 HIT - - [29/Jul/2026:13:50:47 +0000] "GET /0byte.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07EF696A8BF0B71F02B88703 - 404 HIT - - [29/Jul/2026:13:50:52 +0000] "GET /wp.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07EF696A8BF0B71F02B88703 - 404 HIT - - [29/Jul/2026:13:50:54 +0000] "GET /41.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F07EF696A8BF0B71F02B88703 - 404 HIT - - [29/Jul/2026:13:50:56 +0000] "GET /media-admin.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FB4E9696A8BF0B71F02CC8403 - 404 HIT - - [29/Jul/2026:13:50:58 +0000] "GET /4price.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FB4E9696A8BF0B71F02CC8403 - 404 HIT - - [29/Jul/2026:13:51:01 +0000] "GET /MARIJUANA.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 HIT - - [29/Jul/2026:13:51:02 +0000] "GET /marijuana.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 HIT - - [29/Jul/2026:13:51:06 +0000] "GET /f.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 HIT - - [29/Jul/2026:13:51:08 +0000] "GET /.fk.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 HIT - - [29/Jul/2026:13:51:15 +0000] "GET /wikindex.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 HIT - - [29/Jul/2026:13:51:22 +0000] "GET /xox.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FC0E9696A8BF0B71F02DA8403 - 404 HIT - - [29/Jul/2026:13:51:25 +0000] "GET /o.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F03EF696A8BF0B71F02AA8703 - 404 HIT - - [29/Jul/2026:13:52:08 +0000] "GET /new.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:11 +0000] "GET /3index.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:13 +0000] "GET /sindex.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:16 +0000] "GET /baindex.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:19 +0000] "GET /new-index.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:30 +0000] "GET /wi.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:35 +0000] "GET /XxX.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:37 +0000] "GET /mar.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FE6E9696A92F06720027B3F03 - 404 HIT - - [29/Jul/2026:13:52:40 +0000] "GET /root.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A8BF0B71F029F8703 - 404 HIT - - [29/Jul/2026:13:52:42 +0000] "GET /11index.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:52:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785333169.7772529125213623046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 200 BYPASS - - [29/Jul/2026:13:52:50 +0000] "GET /wp-login.php HTTP/1.1" 2664 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:52:55 +0000] "GET /nee.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:00 +0000] "GET /v.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:03 +0000] "GET /z.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:06 +0000] "GET /xx.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:09 +0000] "GET /g.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:11 +0000] "GET /m.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:16 +0000] "GET /shell.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:19 +0000] "GET /sh3ll.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:21 +0000] "GET /c99.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:23 +0000] "GET /alexuse.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:27 +0000] "GET /w.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007F27EA696A8BF0B71F02058503 - 404 HIT - - [29/Jul/2026:13:53:30 +0000] "GET /ws.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 MISS - - [29/Jul/2026:13:53:32 +0000] "GET /2.php HTTP/1.1" 404 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:53:34 +0000] "GET /lol.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:53:36 +0000] "GET /87.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:53:41 +0000] "GET /7yn.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 403 BYPASS - - [29/Jul/2026:13:53:49 +0000] "GET /wp-content/marijuana.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:53:51 +0000] "GET /haxor.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:53:55 +0000] "GET /403.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:53:58 +0000] "GET /13.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 403 BYPASS - - [29/Jul/2026:13:53:59 +0000] "GET /wp-content/plugins/xwp/up.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:54:02 +0000] "GET /cpanel.php HTTP/1.1" 403 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 105.156.69.111 - _uid=0100007FFEEE696A92F0672002E13F03 - 404 HIT - - [29/Jul/2026:13:54:06 +0000] "GET /upload/fw HTTP/1.1" 14692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "105.156.69.111, 105.156.69.111, 105.156.69.111, 105.156.69.111" 54.39.0.214 - - - 200 BYPASS - - [29/Jul/2026:14:01:04 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "54.39.0.214, 54.39.0.214, 54.39.0.214, 54.39.0.214" 14.252.120.89 - - - 403 BYPASS - - [29/Jul/2026:14:03:33 +0000] "POST /xmlrpc.php HTTP/1.1" 385 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/84.0.0.0 Safari/537.36" "14.252.120.89, 14.252.120.89, 14.252.120.89, 14.252.120.89" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:13:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785334438.0796229839324951171875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 213.171.211.213 - - - 200 BYPASS - - [29/Jul/2026:14:13:58 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 213.171.211.213 - _uid=0100007FA60A6A6A8BF0B71F02A89503 - 500 BYPASS - - [29/Jul/2026:14:13:59 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 103.60.15.165 - _uid=0100007FFF4F696A46029F4A02E80303 - 200 BYPASS - - [29/Jul/2026:14:27:30 +0000] "GET /wp-content/uploads/2023/11/black-and-red-logo-300x70.png?nonwebp=1&edge=findredlightnearme.com HTTP/1.1" 8610 "-" "BunnyOptimizer-v01" "103.60.15.165, 103.60.15.165, 103.60.15.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:28:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785335296.6678159236907958984375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:17 +0000] "GET /?rest_route=/batch/v1 HTTP/1.1" 926 "https://www.findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:17 +0000] "GET /wp-json/batch/v1 HTTP/1.1" 939 "https://www.findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:18 +0000] "GET /wp/?rest_route=/batch/v1 HTTP/1.1" 929 "https://www.findredlightnearme.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:20 +0000] "GET /wp/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:21 +0000] "GET /wordpress/?rest_route=/batch/v1 HTTP/1.1" 936 "https://www.findredlightnearme.com/wordpress/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:23 +0000] "GET /wordpress/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/wordpress/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:24 +0000] "GET /blog/?rest_route=/batch/v1 HTTP/1.1" 931 "https://www.findredlightnearme.com/blog/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:25 +0000] "GET /blog/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/blog/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:27 +0000] "GET /old/?rest_route=/batch/v1 HTTP/1.1" 930 "https://www.findredlightnearme.com/old/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:28 +0000] "GET /old/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/old/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:29 +0000] "GET /test/?rest_route=/batch/v1 HTTP/1.1" 931 "https://www.findredlightnearme.com/test/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:31 +0000] "GET /test/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/test/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:32 +0000] "GET /dev/?rest_route=/batch/v1 HTTP/1.1" 930 "https://www.findredlightnearme.com/dev/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:34 +0000] "GET /dev/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/dev/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:35 +0000] "GET /backup/?rest_route=/batch/v1 HTTP/1.1" 933 "https://www.findredlightnearme.com/backup/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:36 +0000] "GET /backup/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/backup/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 MISS - - [29/Jul/2026:14:28:38 +0000] "GET /staging/?rest_route=/batch/v1 HTTP/1.1" 934 "https://www.findredlightnearme.com/staging/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:39 +0000] "GET /staging/wp-json/batch/v1 HTTP/1.1" 61213 "https://www.findredlightnearme.com/staging/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 195.178.110.104 - - - 404 BYPASS - - [29/Jul/2026:14:28:41 +0000] "GET /wp-json/batch/v1 HTTP/1.1" 939 "https://www.findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "195.178.110.104, 195.178.110.104, 195.178.110.104, 195.178.110.104" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:39:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785335956.1551520824432373046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:14:39:16 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:45:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785336304.6389060020446777343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:14:45:05 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FF1116A6A8BF0B71F027D9903 - 500 BYPASS - - [29/Jul/2026:14:45:05 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:47:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785336457.3304100036621093750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.246.188.8 - - - 200 BYPASS - - [29/Jul/2026:14:47:38 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.246.188.8, 185.246.188.8, 185.246.188.8, 185.246.188.8" 185.246.188.8 - _uid=0100007F8A126A6A8BF0B71F02AF9903 - 500 BYPASS - - [29/Jul/2026:14:47:38 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.246.188.8, 185.246.188.8, 185.246.188.8, 185.246.188.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:48:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785336530.6615869998931884765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 134.209.147.209 - - - 200 BYPASS - - [29/Jul/2026:14:48:51 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "134.209.147.209, 134.209.147.209, 134.209.147.209, 134.209.147.209" 134.209.147.209 - _uid=0100007FD3126A6A8BF0B71F02C39903 - 500 BYPASS - - [29/Jul/2026:14:48:51 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "134.209.147.209, 134.209.147.209, 134.209.147.209, 134.209.147.209" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:53:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785336780.6723411083221435546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:53:01 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 819 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:53:02 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339512 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:53:04 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 819 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:53:05 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 339512 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:53:56 +0000] "POST /wp/?rest_route=/batch/v1 HTTP/1.1" 822 "https://findredlightnearme.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:53:57 +0000] "POST /wp/?rest_route=/batch/v1 HTTP/1.1" 339515 "https://findredlightnearme.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:53:59 +0000] "POST /wp/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:00 +0000] "POST /wordpress/?rest_route=/batch/v1 HTTP/1.1" 829 "https://findredlightnearme.com/wordpress/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:54:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785336841.7764739990234375000000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:02 +0000] "POST /wordpress/?rest_route=/batch/v1 HTTP/1.1" 339522 "https://findredlightnearme.com/wordpress/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:03 +0000] "POST /wordpress/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/wordpress/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:04 +0000] "POST /blog/?rest_route=/batch/v1 HTTP/1.1" 824 "https://findredlightnearme.com/blog/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:06 +0000] "POST /blog/?rest_route=/batch/v1 HTTP/1.1" 339517 "https://findredlightnearme.com/blog/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:07 +0000] "POST /blog/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/blog/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:08 +0000] "POST /old/?rest_route=/batch/v1 HTTP/1.1" 823 "https://findredlightnearme.com/old/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:10 +0000] "POST /old/?rest_route=/batch/v1 HTTP/1.1" 339516 "https://findredlightnearme.com/old/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:11 +0000] "POST /old/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/old/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:13 +0000] "POST /test/?rest_route=/batch/v1 HTTP/1.1" 824 "https://findredlightnearme.com/test/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:14 +0000] "POST /test/?rest_route=/batch/v1 HTTP/1.1" 339517 "https://findredlightnearme.com/test/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:16 +0000] "POST /test/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/test/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:17 +0000] "POST /dev/?rest_route=/batch/v1 HTTP/1.1" 823 "https://findredlightnearme.com/dev/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:18 +0000] "POST /dev/?rest_route=/batch/v1 HTTP/1.1" 339548 "https://findredlightnearme.com/dev/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:20 +0000] "POST /dev/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/dev/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:21 +0000] "POST /backup/?rest_route=/batch/v1 HTTP/1.1" 826 "https://findredlightnearme.com/backup/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:22 +0000] "POST /backup/?rest_route=/batch/v1 HTTP/1.1" 339519 "https://findredlightnearme.com/backup/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:24 +0000] "POST /backup/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/backup/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:25 +0000] "POST /staging/?rest_route=/batch/v1 HTTP/1.1" 827 "https://findredlightnearme.com/staging/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:27 +0000] "POST /staging/?rest_route=/batch/v1 HTTP/1.1" 339520 "https://findredlightnearme.com/staging/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 404 BYPASS - - [29/Jul/2026:14:54:28 +0000] "POST /staging/wp-json/batch/v1 HTTP/1.1" 61202 "https://findredlightnearme.com/staging/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:29 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 819 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:31 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339512 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:32 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 819 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 93.123.109.166 - - - 207 BYPASS - - [29/Jul/2026:14:54:34 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 339512 "https://findredlightnearme.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" "93.123.109.166, 93.123.109.166, 93.123.109.166, 93.123.109.166" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:57:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785337047.9459431171417236328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 5.250.184.45 - - - 200 BYPASS - - [29/Jul/2026:14:57:28 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.250.184.45, 5.250.184.45, 5.250.184.45, 5.250.184.45" 5.250.184.45 - _uid=0100007FD8146A6A8BF0B71F023E9A03 - 500 BYPASS - - [29/Jul/2026:14:57:30 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.250.184.45, 5.250.184.45, 5.250.184.45, 5.250.184.45" 54.39.0.146 - - - 200 BYPASS - - [29/Jul/2026:15:16:13 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "54.39.0.146, 54.39.0.146, 54.39.0.146, 54.39.0.146" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:47 +0000] "GET /inputs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:47 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:47 +0000] "GET /goods.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:48 +0000] "GET /file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:48 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:48 +0000] "GET /404.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:49 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:49 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:49 +0000] "GET /term.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:49 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:49 +0000] "GET /1.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:50 +0000] "GET /alfa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:50 +0000] "GET /edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:50 +0000] "GET /elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:50 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:51 +0000] "GET /666.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:16:52 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=d09d31b359 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:16:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785338212.2375819683074951171875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 52.238.199.152 - - - 302 BYPASS - - [29/Jul/2026:15:16:52 +0000] "GET /wp-admin/ HTTP/1.1" 591 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:53 +0000] "GET /ws54.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:53 +0000] "GET /deepseek_d.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:53 +0000] "GET /function/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:53 +0000] "GET /nw.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:54 +0000] "GET /xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:54 +0000] "GET /wp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:54 +0000] "GET /155.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:54 +0000] "GET /96i.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:55 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:55 +0000] "GET /min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:56 +0000] "GET /.well-known/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:56 +0000] "GET /php8.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:16:56 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:56 +0000] "GET /222.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:16:57 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:57 +0000] "GET /info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:57 +0000] "GET /a.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:57 +0000] "GET /chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:16:58 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:58 +0000] "GET /vx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:59 +0000] "GET /admin/controller/extension/ HTTP/1.1" 14800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:16:59 +0000] "GET /wap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 BYPASS - - [29/Jul/2026:15:16:59 +0000] "GET /wp-admin/wp.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:16:59 +0000] "GET /bgymj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:00 +0000] "GET /aa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 MISS - - [29/Jul/2026:15:17:00 +0000] "GET /wp-mail.php HTTP/1.1" 1511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:00 +0000] "GET /bolt.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:00 +0000] "GET /bthil.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:01 +0000] "GET /cgi-bin/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:01 +0000] "GET /x.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:02 +0000] "GET /index/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:02 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:02 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:02 +0000] "GET /wp-good.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:03 +0000] "GET /simple.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:03 +0000] "GET /edit-tags.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:03 +0000] "GET /u.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:03 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:04 +0000] "GET /h.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:04 +0000] "GET /ms-edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:04 +0000] "GET /a7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:05 +0000] "GET /manager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:05 +0000] "GET /w1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:05 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 200 BYPASS - - [29/Jul/2026:15:17:05 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:06 +0000] "GET /default.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:06 +0000] "GET /i.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:06 +0000] "GET /wp-content/uploads/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:06 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:07 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:07 +0000] "GET /gecko-new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:07 +0000] "GET /NewFile.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:07 +0000] "GET /wp-Blogs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:08 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:08 +0000] "GET /themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:08 +0000] "GET /cv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:08 +0000] "GET /wp-admin/js/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:09 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:09 +0000] "GET /ws83.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:09 +0000] "GET /atex1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:10 +0000] "GET /class-t.api.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:10 +0000] "GET /w.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:10 +0000] "GET /archive.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:11 +0000] "GET /bless.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:11 +0000] "GET /sagax1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:11 +0000] "GET /wpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:11 +0000] "GET /fone1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:12 +0000] "GET /ncx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 BYPASS - - [29/Jul/2026:15:17:12 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:12 +0000] "GET /wso.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:13 +0000] "GET /zup.php73 HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:13 +0000] "GET /k.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:13 +0000] "GET /wp-blink.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:13 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:14 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 403 BYPASS - - [29/Jul/2026:15:17:14 +0000] "GET /wp-content/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:14 +0000] "GET /ww5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:15 +0000] "GET /2.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 BYPASS - - [29/Jul/2026:15:17:15 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:15 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:16 +0000] "GET /rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 HIT - - [29/Jul/2026:15:17:16 +0000] "GET /p.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 52.238.199.152 - - - 404 MISS - - [29/Jul/2026:15:17:16 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:24:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785338669.1967051029205322265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:15:24:29 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007F2D1B6A6A8BF0B71F02BF9E03 - 500 BYPASS - - [29/Jul/2026:15:24:30 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:38:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785339510.6286990642547607421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 144.76.32.117 - - - 200 MISS - - [29/Jul/2026:15:38:31 +0000] "GET /page-sitemap.xml HTTP/1.1" 1946 "-" "Mozilla/5.0 (compatible; SERankingBacklinksBot/1.0; +https://seranking.com/backlinks-crawler)" "144.76.32.117, 144.76.32.117, 144.76.32.117, 144.76.32.117" 195.250.20.75 - - - 200 BYPASS - - [29/Jul/2026:15:39:20 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.20.75, 195.250.20.75, 195.250.20.75, 195.250.20.75" 195.250.20.75 - _uid=0100007FA81E6A6A8BF0B71F022DA103 - 500 BYPASS - - [29/Jul/2026:15:39:20 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.20.75, 195.250.20.75, 195.250.20.75, 195.250.20.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:44:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785339869.6530659198760986328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 97.74.93.24 - - - 200 BYPASS - - [29/Jul/2026:15:44:30 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 97.74.93.24 - _uid=0100007FDE1F6A6A8BF0B71F02A4A103 - 500 BYPASS - - [29/Jul/2026:15:44:31 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:15:47:32 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:15:47:32 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 194.5.48.202 - - - 403 BYPASS - - [29/Jul/2026:15:47:32 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.202, 194.5.48.202, 194.5.48.202, 194.5.48.202" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:15:47:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:48:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785340123.1369459629058837890625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:15:48:43 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - _uid=0100007FDB206A6A8BF0B71F0203A203 - 500 BYPASS - - [29/Jul/2026:15:48:44 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 20.79.250.162 - - - 403 BYPASS - - [29/Jul/2026:15:50:09 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - - - 404 MISS - - [29/Jul/2026:15:50:10 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - - - 404 MISS - - [29/Jul/2026:15:50:11 +0000] "GET /xstelth.php HTTP/1.1" 433 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - - - 404 MISS - - [29/Jul/2026:15:50:11 +0000] "GET /584062352875874akp.php HTTP/1.1" 433 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:12 +0000] "GET /newfile.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:13 +0000] "GET /tBEZGQz.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:50:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785340214.4589290618896484375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:15 +0000] "GET /phpinfo?re@=vo@ HTTP/1.1" 14694 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:16 +0000] "GET //drykl.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 403 BYPASS - - [29/Jul/2026:15:50:17 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 297 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:17 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:18 +0000] "GET /dx.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:18 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:19 +0000] "GET /485.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:19 +0000] "GET /gelio1.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:20 +0000] "GET /lp6.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 BYPASS - - [29/Jul/2026:15:50:21 +0000] "GET /wp-admin/maint/admin.php HTTP/1.1" 299 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 403 BYPASS - - [29/Jul/2026:15:50:22 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 297 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:22 +0000] "GET /w3llscc.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:22 +0000] "GET /miru3.php?p= HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 HIT - - [29/Jul/2026:15:50:23 +0000] "GET /autoload_classmap.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 403 BYPASS - - [29/Jul/2026:15:50:24 +0000] "GET /wp-content/ HTTP/1.1" 297 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 403 BYPASS - - [29/Jul/2026:15:50:25 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:25 +0000] "GET //av.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 403 BYPASS - - [29/Jul/2026:15:50:26 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 BYPASS - - [29/Jul/2026:15:50:27 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 14725 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:28 +0000] "GET /tiny.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:28 +0000] "GET /BsMPQ6Wavdefault.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:29 +0000] "GET /zrrhj.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:29 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:30 +0000] "GET /wpgum.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:31 +0000] "GET /ywwbf.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:31 +0000] "GET /xoldj.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:32 +0000] "GET //f35.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007FA316696A5D222E3B02622D03 - 404 MISS - - [29/Jul/2026:15:50:32 +0000] "GET /gk.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 MISS - - [29/Jul/2026:15:50:33 +0000] "GET /wper3.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F33216A6A8BF0B71F0239A203 - 404 HIT - - [29/Jul/2026:15:50:34 +0000] "GET /bthil.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B69D03 - 404 MISS - - [29/Jul/2026:15:50:34 +0000] "GET /wyzer1.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B69D03 - 404 MISS - - [29/Jul/2026:15:50:35 +0000] "GET /mh.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B69D03 - 404 MISS - - [29/Jul/2026:15:50:36 +0000] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B69D03 - 404 MISS - - [29/Jul/2026:15:50:36 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A92F06720029A4503 - 404 HIT - - [29/Jul/2026:15:50:37 +0000] "GET /chosen.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:37 +0000] "GET /sd.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:37 +0000] "GET /z60.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:38 +0000] "GET /home.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:38 +0000] "GET /ws58.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:39 +0000] "GET /gulu.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:40 +0000] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 MISS - - [29/Jul/2026:15:50:40 +0000] "GET /wpls.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F69196A6A8BF0B71F02A79D03 - 404 HIT - - [29/Jul/2026:15:50:41 +0000] "GET /php.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 404 HIT - - [29/Jul/2026:15:50:41 +0000] "GET /100.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 404 MISS - - [29/Jul/2026:15:50:42 +0000] "GET /BDKR28WP.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 404 MISS - - [29/Jul/2026:15:50:42 +0000] "GET /browse.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 404 HIT - - [29/Jul/2026:15:50:42 +0000] "GET /wp-good.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 404 MISS - - [29/Jul/2026:15:50:43 +0000] "GET /8573.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 403 BYPASS - - [29/Jul/2026:15:50:44 +0000] "GET /wp-admin/install.php HTTP/1.1" 297 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7C196A6A8BF0B71F02FA9D03 - 404 HIT - - [29/Jul/2026:15:50:44 +0000] "GET /classwithtostring.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F62196A6A8BF0B71F02889D03 - 404 MISS - - [29/Jul/2026:15:50:45 +0000] "GET /ohct.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F62196A6A8BF0B71F02889D03 - 404 HIT - - [29/Jul/2026:15:50:45 +0000] "GET /bless.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F77196A6A8BF0B71F02E39D03 - 404 HIT - - [29/Jul/2026:15:50:46 +0000] "GET /about.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:46 +0000] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:47 +0000] "GET /ta0ol.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:48 +0000] "GET /sa.php7 HTTP/1.1" 14694 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:49 +0000] "GET /wp-class.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:49 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:50 +0000] "GET /bootstrap.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 MISS - - [29/Jul/2026:15:50:50 +0000] "GET /wp-blog-header.php HTTP/1.1" 382 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F61196A6A8BF0B71F02839D03 - 404 HIT - - [29/Jul/2026:15:50:51 +0000] "GET /aa.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 404 MISS - - [29/Jul/2026:15:50:51 +0000] "GET /tx79.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 404 MISS - - [29/Jul/2026:15:50:52 +0000] "GET /motu.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 404 MISS - - [29/Jul/2026:15:50:52 +0000] "GET /wp-head.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 37.27.122.165 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 200 BYPASS - - [29/Jul/2026:15:50:54 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=d09d31b359 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 302 BYPASS - - [29/Jul/2026:15:50:54 +0000] "GET /wp-admin/options-privacy.php HTTP/1.1" 522 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 200 BYPASS - - [29/Jul/2026:15:50:54 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2Foptions-privacy.php&reauth=1 HTTP/1.1" 4735 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 404 MISS - - [29/Jul/2026:15:50:55 +0000] "GET /60856e3a4findex.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 404 MISS - - [29/Jul/2026:15:50:56 +0000] "GET /wp-the.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F6C196A6A8BF0B71F02B29D03 - 404 HIT - - [29/Jul/2026:15:50:56 +0000] "GET /wp.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F66196A6A8BF0B71F029A9D03 - 404 MISS - - [29/Jul/2026:15:50:57 +0000] "GET /users.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F66196A6A8BF0B71F029A9D03 - 404 MISS - - [29/Jul/2026:15:50:57 +0000] "GET /tinysd.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F66196A6A8BF0B71F029A9D03 - 404 MISS - - [29/Jul/2026:15:50:58 +0000] "GET /ws78.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F66196A6A8BF0B71F029A9D03 - 404 HIT - - [29/Jul/2026:15:50:58 +0000] "GET /elp.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F62196A6A8BF0B71F02879D03 - 404 HIT - - [29/Jul/2026:15:50:59 +0000] "GET /atomlib.php HTTP/1.1" 403 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7B196A6A8BF0B71F02F79D03 - 404 MISS - - [29/Jul/2026:15:50:59 +0000] "GET /wyzer3.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7B196A6A8BF0B71F02F79D03 - 404 MISS - - [29/Jul/2026:15:51:00 +0000] "GET /max.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 20.79.250.162 - _uid=0100007F7B196A6A8BF0B71F02F79D03 - 404 MISS - - [29/Jul/2026:15:51:00 +0000] "GET /ftde.php HTTP/1.1" 345 "-" "-" "20.79.250.162, 20.79.250.162, 20.79.250.162, 20.79.250.162" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:54:57 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:54:57 +0000] "GET /xleet.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:54:57 +0000] "GET /ds.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:54:58 +0000] "GET /f5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:54:58 +0000] "GET /god4m.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:54:58 +0000] "GET /info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:54:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785340499.2113029956817626953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:54:59 +0000] "GET /uploads/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:00 +0000] "GET /.__info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:00 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:00 +0000] "GET /07.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:00 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:01 +0000] "GET /makeasmtp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:01 +0000] "GET /wp-sigunq.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:01 +0000] "GET /wso112233.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:01 +0000] "GET /alfanew.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:02 +0000] "GET /fw.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 200 BYPASS - - [29/Jul/2026:15:55:02 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:55:02 +0000] "GET /simple.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:02 +0000] "GET /classsmtps.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:55:03 +0000] "GET /wp-blog-header.php HTTP/1.1" 382 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:03 +0000] "GET /wp-trackback.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 302 MISS - - [29/Jul/2026:15:55:04 +0000] "GET /wp-signup.php HTTP/1.1" 522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 405 MISS - - [29/Jul/2026:15:55:04 +0000] "GET /wp-comments-post.php HTTP/1.1" 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 MISS - - [29/Jul/2026:15:55:04 +0000] "GET /wp-mail.php HTTP/1.1" 1511 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:55:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785340505.2734389305114746093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 172.202.44.182 - - - 302 MISS - - [29/Jul/2026:15:55:05 +0000] "GET /wp-activate.php HTTP/1.1" 522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:06 +0000] "GET /post.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:06 +0000] "GET /wp-2019.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:06 +0000] "GET /hoot.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:06 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:07 +0000] "GET /bak.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:07 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:07 +0000] "GET /upfile.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:07 +0000] "GET /bypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:08 +0000] "GET /updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:08 +0000] "GET /xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:08 +0000] "GET /ae.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:08 +0000] "GET /moon.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:09 +0000] "GET /blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:09 +0000] "GET /ini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:09 +0000] "GET /admin-ajax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:09 +0000] "GET /akc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:10 +0000] "GET /akcc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:10 +0000] "GET /asasx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:10 +0000] "GET /axx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:10 +0000] "GET /berax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:11 +0000] "GET /build.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:11 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:11 +0000] "GET /checkbox.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:11 +0000] "GET /cong.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:11 +0000] "GET /file4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:12 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:12 +0000] "GET /form.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:12 +0000] "GET /gecko.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:12 +0000] "GET /kyami.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:55:13 +0000] "GET /manager.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:13 +0000] "GET /mari.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:15:55:13 +0000] "GET /nc4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:15:55:13 +0000] "GET /cgi-bin/ HTTP/1.1" 14781 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:59:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785340762.6073319911956787109375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 190.92.174.127 - - - 200 BYPASS - - [29/Jul/2026:15:59:23 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.127, 190.92.174.127, 190.92.174.127, 190.92.174.127" 190.92.174.127 - _uid=0100007F5B236A6A8BF0B71F0291A403 - 500 BYPASS - - [29/Jul/2026:15:59:23 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.127, 190.92.174.127, 190.92.174.127, 190.92.174.127" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:01:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785340872.4014708995819091796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 108.179.194.35 - - - 200 BYPASS - - [29/Jul/2026:16:01:13 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35, 108.179.194.35, 108.179.194.35, 108.179.194.35" 108.179.194.35 - _uid=0100007FC9236A6A8BF0B71F02C2A403 - 500 BYPASS - - [29/Jul/2026:16:01:13 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35, 108.179.194.35, 108.179.194.35, 108.179.194.35" 20.91.208.34 - - - 403 BYPASS - - [29/Jul/2026:16:04:30 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - - - 404 HIT - - [29/Jul/2026:16:04:38 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 432 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F32216A6A8BF0B71F0235A203 - 404 MISS - - [29/Jul/2026:16:04:39 +0000] "GET //aa.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F32216A6A8BF0B71F0235A203 - 404 MISS - - [29/Jul/2026:16:04:41 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F32216A6A8BF0B71F0235A203 - 404 MISS - - [29/Jul/2026:16:04:42 +0000] "GET /media.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F32216A6A8BF0B71F0235A203 - 404 MISS - - [29/Jul/2026:16:04:45 +0000] "GET /images.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F32216A6A8BF0B71F0235A203 - 404 HIT - - [29/Jul/2026:16:04:49 +0000] "GET /gecko.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60226A6A92F0672002484703 - 404 MISS - - [29/Jul/2026:16:04:54 +0000] "GET /82.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60226A6A92F0672002484703 - 404 MISS - - [29/Jul/2026:16:05:18 +0000] "GET /xp.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60226A6A92F0672002484703 - 404 MISS - - [29/Jul/2026:16:05:36 +0000] "GET /adminner.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60226A6A92F0672002484703 - 404 MISS - - [29/Jul/2026:16:05:41 +0000] "GET //a.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60226A6A92F0672002484703 - 404 HIT - - [29/Jul/2026:16:05:42 +0000] "GET /k.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F79196A6A8BF0B71F02F09D03 - 404 HIT - - [29/Jul/2026:16:05:44 +0000] "GET /aaa.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F6E196A6A92F06720029F4503 - 404 HIT - - [29/Jul/2026:16:05:46 +0000] "GET /222.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F68196A6A92F06720029C4503 - 404 MISS - - [29/Jul/2026:16:05:49 +0000] "GET /test.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:05:51 +0000] "GET /11.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 HIT - - [29/Jul/2026:16:05:54 +0000] "GET /mac.php HTTP/1.1" 344 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:05:59 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:03 +0000] "GET /wp-includes/Text/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:05 +0000] "GET /dr.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:10 +0000] "GET /ops.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:15 +0000] "GET //wp-includes/assets/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:19 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:24 +0000] "GET /.well-known/about.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:27 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:29 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 BYPASS - - [29/Jul/2026:16:06:34 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" 299 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 HIT - - [29/Jul/2026:16:06:37 +0000] "GET /8.php HTTP/1.1" 344 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:42 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:45 +0000] "GET //f6.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:49 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:50 +0000] "GET /wp-blog.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:06:53 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:55 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 403 BYPASS - - [29/Jul/2026:16:06:58 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F1E8D696A92F06720022A0703 - 404 MISS - - [29/Jul/2026:16:07:00 +0000] "GET /f35.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007FFDB2696A8BF0B71F02C63803 - 200 HIT - - [29/Jul/2026:16:07:02 +0000] "GET /wp-load.php HTTP/1.1" 207 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007FFDB2696A8BF0B71F02C63803 - 404 MISS - - [29/Jul/2026:16:07:03 +0000] "GET /xyn.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007FFDB2696A8BF0B71F02C63803 - 404 MISS - - [29/Jul/2026:16:07:04 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007FFDB2696A8BF0B71F02C63803 - 404 MISS - - [29/Jul/2026:16:07:06 +0000] "GET /FWAZ.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007FFDB2696A8BF0B71F02C63803 - 404 MISS - - [29/Jul/2026:16:07:08 +0000] "GET /file.php? HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007FFDB2696A8BF0B71F02C63803 - 404 HIT - - [29/Jul/2026:16:07:11 +0000] "GET /file.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60196A6A8BF0B71F02809D03 - 404 MISS - - [29/Jul/2026:16:07:13 +0000] "GET /ss.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60196A6A8BF0B71F02809D03 - 404 MISS - - [29/Jul/2026:16:07:14 +0000] "GET /biufile.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60196A6A8BF0B71F02809D03 - 404 MISS - - [29/Jul/2026:16:07:20 +0000] "GET /coffexium.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60196A6A8BF0B71F02809D03 - 404 MISS - - [29/Jul/2026:16:07:22 +0000] "GET /als.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F60196A6A8BF0B71F02809D03 - 404 HIT - - [29/Jul/2026:16:07:25 +0000] "GET /simple.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F56226A6A8BF0B71F02D8A303 - 404 MISS - - [29/Jul/2026:16:07:28 +0000] "GET /fpwch.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F56226A6A8BF0B71F02D8A303 - 404 HIT - - [29/Jul/2026:16:07:33 +0000] "GET /info.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:07:38 +0000] "GET /11.php?p= HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:07:39 +0000] "GET /dex.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 HIT - - [29/Jul/2026:16:07:43 +0000] "GET /1.php HTTP/1.1" 344 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 403 BYPASS - - [29/Jul/2026:16:07:48 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:02 +0000] "GET /config.json.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:18 +0000] "GET /k2.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:35 +0000] "GET /for.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:40 +0000] "GET /raw.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:44 +0000] "GET //wp.php? HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:48 +0000] "GET /002.php?p= HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:51 +0000] "GET /fffm.php?p= HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:54 +0000] "GET //johen.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:08:59 +0000] "GET /nwflm.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:09:01 +0000] "GET /111.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 403 BYPASS - - [29/Jul/2026:16:09:04 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 297 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:09:08 +0000] "GET /ws.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 MISS - - [29/Jul/2026:16:09:10 +0000] "GET ///coffee.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F52226A6A8BF0B71F02CAA303 - 404 HIT - - [29/Jul/2026:16:09:13 +0000] "GET /goods.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027F9D03 - 404 MISS - - [29/Jul/2026:16:09:15 +0000] "GET /about.php? HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027F9D03 - 404 HIT - - [29/Jul/2026:16:09:17 +0000] "GET /about.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027F9D03 - 404 HIT - - [29/Jul/2026:16:09:19 +0000] "GET /admin.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027E9D03 - 404 MISS - - [29/Jul/2026:16:09:20 +0000] "GET //themes.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027E9D03 - 404 MISS - - [29/Jul/2026:16:09:22 +0000] "GET /wefile.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027E9D03 - 404 MISS - - [29/Jul/2026:16:09:25 +0000] "GET /inputs.php? HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027E9D03 - 404 HIT - - [29/Jul/2026:16:09:26 +0000] "GET /inputs.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027D9D03 - 404 MISS - - [29/Jul/2026:16:09:30 +0000] "GET //adminfuns.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027D9D03 - 404 MISS - - [29/Jul/2026:16:09:33 +0000] "GET /ssixta.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027D9D03 - 404 MISS - - [29/Jul/2026:16:09:36 +0000] "GET /hypo.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F5F196A6A8BF0B71F027D9D03 - 404 MISS - - [29/Jul/2026:16:09:39 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F62196A6A8BF0B71F02859D03 - 404 MISS - - [29/Jul/2026:16:09:46 +0000] "GET /xa.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F62196A6A8BF0B71F02859D03 - 404 HIT - - [29/Jul/2026:16:09:51 +0000] "GET //av.php HTTP/1.1" 344 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F62196A6A8BF0B71F02859D03 - 404 HIT - - [29/Jul/2026:16:09:56 +0000] "GET /bthil.php HTTP/1.1" 403 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F62196A6A8BF0B71F02859D03 - 404 MISS - - [29/Jul/2026:16:09:58 +0000] "GET /geforce.php HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 20.91.208.34 - _uid=0100007F62196A6A8BF0B71F02859D03 - 404 MISS - - [29/Jul/2026:16:10:01 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 345 "-" "-" "20.91.208.34, 20.91.208.34, 20.91.208.34, 20.91.208.34" 45.88.186.250 - - - 404 BYPASS - - [29/Jul/2026:16:12:49 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:50 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:50 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:50 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:50 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:50 +0000] "GET /piwvhpfv.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:50 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:12:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785341571.0810420513153076171875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.88.186.250 - - - 404 BYPASS - - [29/Jul/2026:16:12:51 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 14802 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:12:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785341571.3576920032501220703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:51 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 14800 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 BYPASS - - [29/Jul/2026:16:12:52 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 14784 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:52 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 14800 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:18:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785341938.3632700443267822265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.28.36.205 - - - 200 BYPASS - - [29/Jul/2026:16:18:58 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.28.36.205, 103.28.36.205, 103.28.36.205, 103.28.36.205" 103.28.36.205 - _uid=0100007FF2276A6A8BF0B71F02B5A803 - 500 BYPASS - - [29/Jul/2026:16:18:59 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.28.36.205, 103.28.36.205, 103.28.36.205, 103.28.36.205" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:25:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785342352.9801819324493408203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:16:25:53 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007F91296A6A8BF0B71F0295A903 - 500 BYPASS - - [29/Jul/2026:16:25:54 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:44:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785343449.5106940269470214843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 97.74.93.24 - - - 200 BYPASS - - [29/Jul/2026:16:44:10 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 97.74.93.24 - _uid=0100007FDA2D6A6A92F0672002744903 - 500 BYPASS - - [29/Jul/2026:16:44:15 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "97.74.93.24, 97.74.93.24, 97.74.93.24, 97.74.93.24" 54.39.89.128 - - - 200 BYPASS - - [29/Jul/2026:16:56:32 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "54.39.89.128, 54.39.89.128, 54.39.89.128, 54.39.89.128" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:08:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785344903.8331699371337890625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 152.53.111.131 - - - 200 BYPASS - - [29/Jul/2026:17:08:24 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 152.53.111.131 - _uid=0100007F88336A6A8BF0B71F024AAF03 - 500 BYPASS - - [29/Jul/2026:17:08:25 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:17:08:34 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007F92336A6A8BF0B71F024FAF03 - 500 BYPASS - - [29/Jul/2026:17:08:35 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 34.23.178.20 - - - 404 MISS - - [29/Jul/2026:17:10:21 +0000] "GET /.git/config HTTP/1.1" 14782 "-" "-" "34.23.178.20, 34.23.178.20, 34.23.178.20, 34.23.178.20" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:10:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785345020.7588961124420166015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:21:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785345710.8910160064697265625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 149.202.168.36 - - - 200 BYPASS - - [29/Jul/2026:17:21:51 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "149.202.168.36, 149.202.168.36, 149.202.168.36, 149.202.168.36" 149.202.168.36 - _uid=0100007FAF366A6A8BF0B71F0203B103 - 500 BYPASS - - [29/Jul/2026:17:21:52 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "149.202.168.36, 149.202.168.36, 149.202.168.36, 149.202.168.36" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:37:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785346648.5913050174713134765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 216.236.40.21 - - - 207 BYPASS - - [29/Jul/2026:17:37:29 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1238 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F593A6A6A8BF0B71F0230B403 - 207 BYPASS - - [29/Jul/2026:17:37:30 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5220 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F593A6A6A8BF0B71F0230B403 - 207 BYPASS - - [29/Jul/2026:17:37:31 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F593A6A6A8BF0B71F0230B403 - 200 MISS - - [29/Jul/2026:17:37:32 +0000] "GET /?rest_route=%2Fwp%2Fv2%2Fposts&per_page=1&_fields=link HTTP/1.1" 715 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - - - 200 MISS - - [29/Jul/2026:17:37:32 +0000] "GET /?rest_route=%2Fwp%2Fv2%2Fpages&per_page=1&_fields=link HTTP/1.1" 877 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - - - 207 BYPASS - - [29/Jul/2026:17:37:33 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 6118 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5438 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5487 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:37 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:38 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:38 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:39 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F5D3A6A6A92F0672002BC4B03 - 207 BYPASS - - [29/Jul/2026:17:37:40 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 5340 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - - - 200 BYPASS - - [29/Jul/2026:17:37:42 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F663A6A6A8BF0B71F0238B403 - 500 BYPASS - - [29/Jul/2026:17:37:43 +0000] "POST /wp-login.php HTTP/1.1" 3375 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:39:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785346744.6529619693756103515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 45.11.97.227 - - - 200 BYPASS - - [29/Jul/2026:17:39:05 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.11.97.227, 45.11.97.227, 45.11.97.227, 45.11.97.227" 45.11.97.227 - _uid=0100007FB93A6A6A8BF0B71F0256B403 - 500 BYPASS - - [29/Jul/2026:17:39:09 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.11.97.227, 45.11.97.227, 45.11.97.227, 45.11.97.227" 194.5.48.159 - - - 403 BYPASS - - [29/Jul/2026:17:39:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:17:39:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:17:39:12 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:17:39:12 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 217.182.128.41 - - - 200 BYPASS - - [29/Jul/2026:17:39:15 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 217.182.128.41 - _uid=0100007FC33A6A6A8BF0B71F0261B403 - 500 BYPASS - - [29/Jul/2026:17:39:17 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:36 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:36 +0000] "GET /edit.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:36 +0000] "GET /w.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:37 +0000] "GET /file.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:37 +0000] "GET /adminfuns.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:37 +0000] "GET /aa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:37 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:38 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:38 +0000] "GET /goods.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:38 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:38 +0000] "GET /info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:39 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:39 +0000] "GET /simple.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:39 +0000] "GET /ioxi-o.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:39 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 301 BYPASS - - [29/Jul/2026:17:56:40 +0000] "GET /wp-admin HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:40 +0000] "GET /wp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:40 +0000] "GET /file2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:40 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:41 +0000] "GET /alfa.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:41 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:41 +0000] "GET /222.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:41 +0000] "GET /asasx.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:42 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:42 +0000] "GET /themes.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [29/Jul/2026:17:56:42 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:42 +0000] "GET /buy.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:43 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:43 +0000] "GET /inputs.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:43 +0000] "GET /100.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:43 +0000] "GET /akc.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:44 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:44 +0000] "GET /php.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:44 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:44 +0000] "GET /index/function.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:45 +0000] "GET /wk/index.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:45 +0000] "GET /wp-blink.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:45 +0000] "GET /xfun.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:45 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [29/Jul/2026:17:56:46 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:46 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:46 +0000] "GET /term.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:46 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 MISS - - [29/Jul/2026:17:56:47 +0000] "GET /file5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:47 +0000] "GET /makeasmtp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [29/Jul/2026:17:56:47 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:47 +0000] "GET /atomlib.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:48 +0000] "GET /min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:48 +0000] "GET /mac.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 HIT - - [29/Jul/2026:17:56:48 +0000] "GET /nc4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:22:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785349368.2848949432373046875000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 119.195.102.159 - - - 200 BYPASS - - [29/Jul/2026:18:22:49 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159" 119.195.102.159 - _uid=0100007FF9446A6A8BF0B71F021DB803 - 500 BYPASS - - [29/Jul/2026:18:22:49 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159" 51.161.37.46 - - - 200 BYPASS - - [29/Jul/2026:18:23:26 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "51.161.37.46, 51.161.37.46, 51.161.37.46, 51.161.37.46" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:24:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785349497.3279039859771728515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 217.182.128.41 - - - 200 BYPASS - - [29/Jul/2026:18:24:58 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 217.182.128.41 - _uid=0100007F7A456A6A8BF0B71F024FB803 - 500 BYPASS - - [29/Jul/2026:18:24:58 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:32:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785349933.8075139522552490234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 167.71.240.77 - - - 200 BYPASS - - [29/Jul/2026:18:32:14 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 167.71.240.77 - _uid=0100007F2E476A6A8BF0B71F02E4B803 - 500 BYPASS - - [29/Jul/2026:18:32:18 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.240.77, 167.71.240.77, 167.71.240.77, 167.71.240.77" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:35:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785350146.1206610202789306640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 185.104.44.195 - - - 200 BYPASS - - [29/Jul/2026:18:35:46 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.104.44.195, 185.104.44.195, 185.104.44.195, 185.104.44.195" 185.104.44.195 - _uid=0100007F02486A6A8BF0B71F024BB903 - 500 BYPASS - - [29/Jul/2026:18:35:47 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.104.44.195, 185.104.44.195, 185.104.44.195, 185.104.44.195" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:37:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785350275.2335519790649414062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 129.211.218.71 - - - 200 BYPASS - - [29/Jul/2026:18:37:55 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "129.211.218.71, 129.211.218.71, 129.211.218.71, 129.211.218.71" 129.211.218.71 - _uid=0100007F83486A6A8BF0B71F02B1B903 - 500 BYPASS - - [29/Jul/2026:18:37:56 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "129.211.218.71, 129.211.218.71, 129.211.218.71, 129.211.218.71" 172.213.144.209 - - - 403 BYPASS - - [29/Jul/2026:18:48:38 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 HIT - - [29/Jul/2026:18:48:41 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 432 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F96246A6A92F06720029B4703 - 404 MISS - - [29/Jul/2026:18:48:42 +0000] "GET /nothing2.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F96246A6A92F06720029B4703 - 404 MISS - - [29/Jul/2026:18:48:45 +0000] "GET /wkl.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F96246A6A92F06720029B4703 - 404 HIT - - [29/Jul/2026:18:48:47 +0000] "GET /ls.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F96246A6A92F06720029B4703 - 404 MISS - - [29/Jul/2026:18:48:49 +0000] "GET /error.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:48:51 +0000] "GET /wpo.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 MISS - - [29/Jul/2026:18:48:52 +0000] "GET /shellalfa.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 HIT - - [29/Jul/2026:18:48:53 +0000] "GET /simple.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002474C03 - 404 HIT - - [29/Jul/2026:18:48:55 +0000] "GET /8.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002474C03 - 404 BYPASS - - [29/Jul/2026:18:48:58 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 299 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002474C03 - 404 MISS - - [29/Jul/2026:18:49:00 +0000] "GET /n.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002474C03 - 404 MISS - - [29/Jul/2026:18:49:01 +0000] "GET /s.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F2F16696A6022FC3A02F9D703 - 404 MISS - - [29/Jul/2026:18:49:02 +0000] "GET /cong.php?p= HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F2F16696A6022FC3A02F9D703 - 404 MISS - - [29/Jul/2026:18:49:04 +0000] "GET /wp-includes/fonts/about.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F2F16696A6022FC3A02F9D703 - 404 MISS - - [29/Jul/2026:18:49:14 +0000] "GET /css.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FF1EE696A92F0672002DC3F03 - 404 MISS - - [29/Jul/2026:18:49:16 +0000] "GET /lv.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FF1EE696A92F0672002DC3F03 - 404 MISS - - [29/Jul/2026:18:49:17 +0000] "GET /ee.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:49:18 +0000] "GET /6.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:49:19 +0000] "GET /system_log.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F09EF696A8BF0B71F02C08703 - 404 MISS - - [29/Jul/2026:18:49:20 +0000] "GET /ab.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:49:21 +0000] "GET /lock360.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F06EF696A8BF0B71F02B58703 - 404 HIT - - [29/Jul/2026:18:49:25 +0000] "GET /about.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002444C03 - 404 HIT - - [29/Jul/2026:18:49:27 +0000] "GET /222.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B8B503 - 404 MISS - - [29/Jul/2026:18:49:28 +0000] "GET /abcd.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F6E196A6A8BF0B71F02BD9D03 - 404 MISS - - [29/Jul/2026:18:49:29 +0000] "GET /gifclass.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F0DEF696A92F0672002EB3F03 - 404 MISS - - [29/Jul/2026:18:49:30 +0000] "GET /enclas.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F0DEF696A92F0672002EB3F03 - 404 HIT - - [29/Jul/2026:18:49:32 +0000] "GET /alfa.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B6B503 - 404 MISS - - [29/Jul/2026:18:49:32 +0000] "GET /we.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B6B503 - 404 MISS - - [29/Jul/2026:18:49:33 +0000] "GET /fe5.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B6B503 - 404 MISS - - [29/Jul/2026:18:49:35 +0000] "GET /tgrs.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B6B503 - 404 MISS - - [29/Jul/2026:18:49:38 +0000] "GET /ut.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B6B503 - 404 MISS - - [29/Jul/2026:18:49:40 +0000] "GET /a3.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B6B503 - 404 HIT - - [29/Jul/2026:18:49:41 +0000] "GET /aa.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD53E6A6A8BF0B71F02B0B503 - 404 MISS - - [29/Jul/2026:18:49:42 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:49:43 +0000] "GET /3.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:49:44 +0000] "GET /f6.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:49:48 +0000] "GET /fm.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F00B3696A92F0672002E61703 - 404 MISS - - [29/Jul/2026:18:49:48 +0000] "GET /rrr.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F00B3696A92F0672002E61703 - 404 MISS - - [29/Jul/2026:18:49:50 +0000] "GET /usep.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F00B3696A92F0672002E61703 - 404 MISS - - [29/Jul/2026:18:49:53 +0000] "GET /fm.php?p= HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F00B3696A92F0672002E61703 - 404 MISS - - [29/Jul/2026:18:49:56 +0000] "GET /0x.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F6654696A3843B747029E1F03 - 404 MISS - - [29/Jul/2026:18:49:57 +0000] "GET /goat.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F6654696A3843B747029E1F03 - 404 MISS - - [29/Jul/2026:18:49:58 +0000] "GET /123.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F06EF696A8BF0B71F02B68703 - 404 HIT - - [29/Jul/2026:18:49:59 +0000] "GET /ioxi-o.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:00 +0000] "GET /taktak.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:04 +0000] "GET /gt.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:05 +0000] "GET /aghbvr.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:07 +0000] "GET /miso.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:08 +0000] "GET /naxc.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:12 +0000] "GET /fex.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:16 +0000] "GET /taff.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:17 +0000] "GET /bless11.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:19 +0000] "GET /aj.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 MISS - - [29/Jul/2026:18:50:20 +0000] "GET /opts.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A92F0672002484C03 - 404 HIT - - [29/Jul/2026:18:50:22 +0000] "GET /wpo.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 MISS - - [29/Jul/2026:18:50:24 +0000] "GET /filer.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 MISS - - [29/Jul/2026:18:50:27 +0000] "GET /en0.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 MISS - - [29/Jul/2026:18:50:28 +0000] "GET /kaza.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 MISS - - [29/Jul/2026:18:50:29 +0000] "GET /wsd.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 MISS - - [29/Jul/2026:18:50:31 +0000] "GET /gifclass4.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F134B6A6A8BF0B71F0256BA03 - 404 HIT - - [29/Jul/2026:18:50:32 +0000] "GET /info.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:33 +0000] "GET /333.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:35 +0000] "GET /cfile.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:37 +0000] "GET /bless3.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 HIT - - [29/Jul/2026:18:50:38 +0000] "GET /bless.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:39 +0000] "GET /doti.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:40 +0000] "GET /031.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:42 +0000] "GET /wfile.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 MISS - - [29/Jul/2026:18:50:43 +0000] "GET /lala.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD63E6A6A92F0672002464C03 - 404 HIT - - [29/Jul/2026:18:50:45 +0000] "GET /mac.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:50:47 +0000] "GET /he.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:50:49 +0000] "GET /plss3.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:50:50 +0000] "GET /ton.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:50:52 +0000] "GET /33.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:50:55 +0000] "GET /nfile.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:50:58 +0000] "GET /ffile.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:51:00 +0000] "GET /file18.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:51:03 +0000] "GET /file21.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:51:05 +0000] "GET /yellow.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:51:07 +0000] "GET /file1.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 MISS - - [29/Jul/2026:18:51:08 +0000] "GET /geck.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FE03E6A6A8BF0B71F02D6B503 - 404 HIT - - [29/Jul/2026:18:51:09 +0000] "GET /file4.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F5F226A6A92F0672002454703 - 404 MISS - - [29/Jul/2026:18:51:10 +0000] "GET /file88.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F5F226A6A92F0672002454703 - 404 HIT - - [29/Jul/2026:18:51:11 +0000] "GET /7.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02D0B503 - 404 MISS - - [29/Jul/2026:18:51:12 +0000] "GET /size.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F06B3696A92F0672002F01703 - 404 HIT - - [29/Jul/2026:18:51:13 +0000] "GET /bolt.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F6C196A6A8BF0B71F02B49D03 - 404 MISS - - [29/Jul/2026:18:51:16 +0000] "GET /file8.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F6C196A6A8BF0B71F02B49D03 - 404 HIT - - [29/Jul/2026:18:51:17 +0000] "GET /file2.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:18 +0000] "GET /vee.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:23 +0000] "GET /a2.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:25 +0000] "GET /xxa.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:29 +0000] "GET /mlex.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:30 +0000] "GET /030.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:33 +0000] "GET /haa.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:35 +0000] "GET /xsox.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:40 +0000] "GET /classgoto24.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:43 +0000] "GET /inde.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:44 +0000] "GET /akk.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:47 +0000] "GET /alpa.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:48 +0000] "GET /finny.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:50 +0000] "GET /file15.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:52 +0000] "GET /0x0x.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:54 +0000] "GET /2clas.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 MISS - - [29/Jul/2026:18:51:57 +0000] "GET /file9.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD83E6A6A92F06720024B4C03 - 404 HIT - - [29/Jul/2026:18:52:00 +0000] "GET /aaa.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 403 BYPASS - - [29/Jul/2026:18:52:02 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 403 BYPASS - - [29/Jul/2026:18:52:03 +0000] "GET /wp-admin/js/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 403 BYPASS - - [29/Jul/2026:18:52:04 +0000] "GET /wp-admin/css/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 403 BYPASS - - [29/Jul/2026:18:52:05 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 404 MISS - - [29/Jul/2026:18:52:06 +0000] "GET /pucci.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 403 BYPASS - - [29/Jul/2026:18:52:08 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 403 BYPASS - - [29/Jul/2026:18:52:09 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDE3E6A6A8BF0B71F02CEB503 - 404 HIT - - [29/Jul/2026:18:52:10 +0000] "GET /100.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 403 BYPASS - - [29/Jul/2026:18:52:11 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 403 BYPASS - - [29/Jul/2026:18:52:15 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 HIT - - [29/Jul/2026:18:52:17 +0000] "GET //cgi-bin/index.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 403 BYPASS - - [29/Jul/2026:18:52:18 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:19 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:22 +0000] "GET /ilex.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:24 +0000] "GET /tor.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:25 +0000] "GET /klex.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:26 +0000] "GET /shell1.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:30 +0000] "GET /sec.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:31 +0000] "GET /filesss.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:33 +0000] "GET /ea.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:36 +0000] "GET /gi.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:39 +0000] "GET /10.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 HIT - - [29/Jul/2026:18:52:39 +0000] "GET /11.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FDB3E6A6A8BF0B71F02C1B503 - 404 MISS - - [29/Jul/2026:18:52:45 +0000] "GET /12.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:52:49 +0000] "GET /13.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:52:57 +0000] "GET /hi.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F094C6A6A8BF0B71F0294BA03 - 404 MISS - - [29/Jul/2026:18:53:11 +0000] "GET /v.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F094C6A6A8BF0B71F0294BA03 - 404 MISS - - [29/Jul/2026:18:53:15 +0000] "GET /ar.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F094C6A6A8BF0B71F0294BA03 - 404 HIT - - [29/Jul/2026:18:53:17 +0000] "GET /chosen.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD73E6A6A8BF0B71F02B3B503 - 404 HIT - - [29/Jul/2026:18:53:22 +0000] "GET /155.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F66196A6A8BF0B71F029B9D03 - 404 MISS - - [29/Jul/2026:18:53:28 +0000] "GET /ppp.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F66196A6A8BF0B71F029B9D03 - 404 MISS - - [29/Jul/2026:18:53:29 +0000] "GET /201.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F66196A6A8BF0B71F029B9D03 - 404 MISS - - [29/Jul/2026:18:53:34 +0000] "GET /install.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F01EF696A8BF0B71F02A38703 - 404 HIT - - [29/Jul/2026:18:53:42 +0000] "GET /max.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F01EF696A8BF0B71F02A38703 - 404 HIT - - [29/Jul/2026:18:53:42 +0000] "GET /1.php HTTP/1.1" 344 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007FD93E6A6A8BF0B71F02B7B503 - 404 HIT - - [29/Jul/2026:18:53:43 +0000] "GET /bak.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F5B226A6A8BF0B71F02E0A303 - 404 HIT - - [29/Jul/2026:18:53:44 +0000] "GET /ini.php HTTP/1.1" 403 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F5D226A6A8BF0B71F02E9A303 - 404 MISS - - [29/Jul/2026:18:53:47 +0000] "GET /mail.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - - - 404 MISS - - [29/Jul/2026:18:53:56 +0000] "GET /dlu.php HTTP/1.1" 433 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:53:58 +0000] "GET /zde.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:01 +0000] "GET /ifm.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:10 +0000] "GET /redi.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:15 +0000] "GET /fns.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:17 +0000] "GET /pent.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:25 +0000] "GET /wsx.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:28 +0000] "GET /r79.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:31 +0000] "GET /mpxct.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:33 +0000] "GET /x3.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:38 +0000] "GET /wan.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:40 +0000] "GET /iov.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:41 +0000] "GET /RsR.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:42 +0000] "GET /ouh.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:54:51 +0000] "GET /133.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:55:00 +0000] "GET /x0.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:55:04 +0000] "GET /wsr2.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:55:06 +0000] "GET /hq.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:55:09 +0000] "GET /blox.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F444C6A6A8BF0B71F029BBA03 - 404 MISS - - [29/Jul/2026:18:55:15 +0000] "GET /ant.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F108D696A92F0672002240703 - 404 MISS - - [29/Jul/2026:18:55:22 +0000] "GET /fso.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F108D696A92F0672002240703 - 403 BYPASS - - [29/Jul/2026:18:55:26 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 172.213.144.209 - _uid=0100007F108D696A92F0672002240703 - 404 MISS - - [29/Jul/2026:18:55:29 +0000] "GET /2P.php HTTP/1.1" 345 "-" "-" "172.213.144.209, 172.213.144.209, 172.213.144.209, 172.213.144.209" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:18:58:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:18:58:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:18:58:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:18:58:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:01:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785351681.2316219806671142578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 57.129.140.39 - - - 200 BYPASS - - [29/Jul/2026:19:01:21 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "57.129.140.39, 57.129.140.39, 57.129.140.39, 57.129.140.39" 57.129.140.39 - _uid=0100007F014E6A6A92F0672002A34D03 - 500 BYPASS - - [29/Jul/2026:19:01:22 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "57.129.140.39, 57.129.140.39, 57.129.140.39, 57.129.140.39" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:09:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785352139.9754149913787841796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 182.93.93.93 - - - 200 BYPASS - - [29/Jul/2026:19:09:00 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "182.93.93.93, 182.93.93.93, 182.93.93.93, 182.93.93.93" 182.93.93.93 - _uid=0100007FCC4F6A6A8BF0B71F02EEBB03 - 500 BYPASS - - [29/Jul/2026:19:09:02 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "182.93.93.93, 182.93.93.93, 182.93.93.93, 182.93.93.93" 17.22.237.184 - - - 200 BYPASS - - [29/Jul/2026:19:11:43 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "17.22.237.184, 17.22.237.184, 17.22.237.184, 17.22.237.184" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:20:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785352842.4038519859313964843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 212.80.9.235 - - - 200 BYPASS - - [29/Jul/2026:19:20:43 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "212.80.9.235, 212.80.9.235, 212.80.9.235, 212.80.9.235" 212.80.9.235 - _uid=0100007F8B526A6A8BF0B71F02AABC03 - 500 BYPASS - - [29/Jul/2026:19:20:43 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "212.80.9.235, 212.80.9.235, 212.80.9.235, 212.80.9.235" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:21:47 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:21:47 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:21:47 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:19:21:47 +0000] "GET /ylensjsv.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:21:47 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:21:47 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:19:21:48 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 491 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:19:21:48 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 14799 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:21:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785352907.6929180622100830078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:21:48 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 14802 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:19:21:48 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 14799 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:21:50 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 14784 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:27:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785353269.7723419666290283203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 217.60.241.25 - - - 207 BYPASS - - [29/Jul/2026:19:27:50 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.60.241.25, 217.60.241.25, 217.60.241.25, 217.60.241.25" 217.60.241.25 - _uid=0100007F36546A6A8BF0B71F020FBE03 - 207 BYPASS - - [29/Jul/2026:19:27:51 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 339415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.60.241.25, 217.60.241.25, 217.60.241.25, 217.60.241.25" 194.5.48.203 - - - 403 BYPASS - - [29/Jul/2026:19:34:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.203, 194.5.48.203, 194.5.48.203, 194.5.48.203" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:19:34:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:19:34:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:19:34:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 64.89.161.160 - - - 404 MISS - - [29/Jul/2026:19:51:28 +0000] "GET /assets/fileupload/index.php?file=tf2rghf.jpg HTTP/1.1" 433 "-" "ALittle Client" "64.89.161.160, 64.89.161.160, 64.89.161.160, 64.89.161.160" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:08:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785355688.9074780941009521484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.145.49.99 - - - 200 BYPASS - - [29/Jul/2026:20:08:09 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 209.145.49.99 - _uid=0100007FA95D6A6A8BF0B71F02BFC203 - 500 BYPASS - - [29/Jul/2026:20:08:10 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 185.242.3.192 - - - 200 BYPASS - - [29/Jul/2026:20:13:23 +0000] "GET /txets.php HTTP/1.1" 241 "http://findredlightnearme.com/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192" 185.242.3.192 - - - 200 BYPASS - - [29/Jul/2026:20:13:26 +0000] "GET /wp-content/txets.php HTTP/1.1" 241 "http://findredlightnearme.com/wp-content/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192" 185.242.3.192 - - - 200 BYPASS - - [29/Jul/2026:20:13:29 +0000] "GET /wp-admin/txets.php HTTP/1.1" 241 "http://findredlightnearme.com/wp-admin/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:14:32 +0000] "POST /wp-cron.php?doing_wp_cron=1785356071.6018159389495849609375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.241.143.148 - - - 200 BYPASS - - [29/Jul/2026:20:14:32 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 192.241.143.148 - _uid=0100007F285F6A6A92F0672002B24F03 - 500 BYPASS - - [29/Jul/2026:20:14:32 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:26:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785356774.6660349369049072265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.42.27.89 - - - 200 BYPASS - - [29/Jul/2026:20:26:15 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.27.89, 209.42.27.89, 209.42.27.89, 209.42.27.89" 209.42.27.89 - _uid=0100007FE7616A6A92F0672002485003 - 500 BYPASS - - [29/Jul/2026:20:26:15 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.27.89, 209.42.27.89, 209.42.27.89, 209.42.27.89" 4.184.60.71 - - - 403 BYPASS - - [29/Jul/2026:20:32:01 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F41636A6A8BF0B71F02AEC703 - 404 MISS - - [29/Jul/2026:20:32:01 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F094B6A6A8BF0B71F0254BA03 - 404 MISS - - [29/Jul/2026:20:32:02 +0000] "GET /x.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:02 +0000] "GET /readme.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:03 +0000] "GET /la.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:03 +0000] "GET /style.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:03 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 HIT - - [29/Jul/2026:20:32:04 +0000] "GET /css.php HTTP/1.1" 344 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:04 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:04 +0000] "GET /alpha.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:05 +0000] "GET /wp-2019.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:05 +0000] "GET /db.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:06 +0000] "GET /403.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:06 +0000] "GET /ftde.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6D196A6A92F06720029D4503 - 404 MISS - - [29/Jul/2026:20:32:06 +0000] "GET /edit.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD43E6A6A8BF0B71F02ACB503 - 404 MISS - - [29/Jul/2026:20:32:07 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD43E6A6A8BF0B71F02ACB503 - 404 MISS - - [29/Jul/2026:20:32:07 +0000] "GET /radio.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02838703 - 404 MISS - - [29/Jul/2026:20:32:08 +0000] "GET /.gitignore.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02838703 - 404 MISS - - [29/Jul/2026:20:32:08 +0000] "GET /jga.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02838703 - 404 MISS - - [29/Jul/2026:20:32:08 +0000] "GET /crgio.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02838703 - 404 MISS - - [29/Jul/2026:20:32:09 +0000] "GET /wp-kikikoko.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02838703 - 404 MISS - - [29/Jul/2026:20:32:09 +0000] "GET /r.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FFBEE696A8BF0B71F02948703 - 404 MISS - - [29/Jul/2026:20:32:10 +0000] "GET /file.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD53E6A6A8BF0B71F02AEB503 - 404 MISS - - [29/Jul/2026:20:32:10 +0000] "GET /ty.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD53E6A6A8BF0B71F02AEB503 - 404 MISS - - [29/Jul/2026:20:32:10 +0000] "GET /as.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F67196A6A8BF0B71F029D9D03 - 404 MISS - - [29/Jul/2026:20:32:11 +0000] "GET /makeasmtp.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 37.27.122.165 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 200 BYPASS - - [29/Jul/2026:20:32:12 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=d09d31b359 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:32:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785357132.3892610073089599609375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 302 BYPASS - - [29/Jul/2026:20:32:13 +0000] "GET /wp-admin/about.php HTTP/1.1" 512 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 200 BYPASS - - [29/Jul/2026:20:32:13 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Ffindredlightnearme.com%2Fwp-admin%2Fabout.php&reauth=1 HTTP/1.1" 4729 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 404 MISS - - [29/Jul/2026:20:32:14 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 404 MISS - - [29/Jul/2026:20:32:14 +0000] "GET /m.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 200 BYPASS - - [29/Jul/2026:20:32:14 +0000] "GET /wp-login.php HTTP/1.1" 2664 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 404 MISS - - [29/Jul/2026:20:32:15 +0000] "GET /ava.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDF3E6A6A8BF0B71F02D2B503 - 404 MISS - - [29/Jul/2026:20:32:15 +0000] "GET /plugins.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F08B3696A92F0672002F51703 - 404 MISS - - [29/Jul/2026:20:32:16 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FDB3E6A6A8BF0B71F02C0B503 - 404 MISS - - [29/Jul/2026:20:32:16 +0000] "GET /log.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5A226A6A8BF0B71F02DFA303 - 404 HIT - - [29/Jul/2026:20:32:16 +0000] "GET /w.php HTTP/1.1" 403 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD43E6A6A8BF0B71F02ADB503 - 404 MISS - - [29/Jul/2026:20:32:17 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD43E6A6A8BF0B71F02ADB503 - 404 MISS - - [29/Jul/2026:20:32:17 +0000] "GET /cc.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F07EF696A8BF0B71F02BA8703 - 404 MISS - - [29/Jul/2026:20:32:17 +0000] "GET /moon.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5C226A6A8BF0B71F02E6A303 - 404 MISS - - [29/Jul/2026:20:32:18 +0000] "GET /shell.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5C226A6A8BF0B71F02E6A303 - 404 MISS - - [29/Jul/2026:20:32:18 +0000] "GET /config.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FEDEE696A8BF0B71F02658703 - 404 MISS - - [29/Jul/2026:20:32:41 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FEDEE696A8BF0B71F02658703 - 404 HIT - - [29/Jul/2026:20:32:41 +0000] "GET /wp.php HTTP/1.1" 403 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD83E6A6A92F06720024A4C03 - 404 MISS - - [29/Jul/2026:20:32:42 +0000] "GET /uninstall.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD83E6A6A92F06720024A4C03 - 404 MISS - - [29/Jul/2026:20:32:42 +0000] "GET /echkm.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD83E6A6A92F06720024A4C03 - 404 MISS - - [29/Jul/2026:20:32:42 +0000] "GET /domvf.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD83E6A6A92F06720024A4C03 - 404 MISS - - [29/Jul/2026:20:32:43 +0000] "GET /item.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02848703 - 404 MISS - - [29/Jul/2026:20:32:43 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FF6EE696A8BF0B71F02848703 - 404 MISS - - [29/Jul/2026:20:32:44 +0000] "GET /404.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60196A6A92F0672002984503 - 404 MISS - - [29/Jul/2026:20:32:44 +0000] "GET /resp.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F60196A6A92F0672002984503 - 404 MISS - - [29/Jul/2026:20:32:44 +0000] "GET /login.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:46:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785357979.8218739032745361328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 64.89.163.75 - - - 207 BYPASS - - [29/Jul/2026:20:46:20 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 634 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "64.89.163.75, 64.89.163.75, 64.89.163.75, 64.89.163.75" 64.89.163.75 - _uid=0100007F9C666A6A8BF0B71F023ACB03 - 207 BYPASS - - [29/Jul/2026:20:46:21 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 339415 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "64.89.163.75, 64.89.163.75, 64.89.163.75, 64.89.163.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:48:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785358123.8418819904327392578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.200.22.140 - - - 200 BYPASS - - [29/Jul/2026:20:48:44 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.200.22.140, 103.200.22.140, 103.200.22.140, 103.200.22.140" 103.200.22.140 - _uid=0100007F2C676A6A8BF0B71F02BFCB03 - 500 BYPASS - - [29/Jul/2026:20:48:50 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.200.22.140, 103.200.22.140, 103.200.22.140, 103.200.22.140" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:50:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785358242.3253738880157470703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 217.182.128.41 - - - 200 BYPASS - - [29/Jul/2026:20:50:42 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 217.182.128.41 - _uid=0100007FA2676A6A8BF0B71F021CCC03 - 500 BYPASS - - [29/Jul/2026:20:50:43 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:03:34 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:03:34 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:03:34 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:03:34 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:03:34 +0000] "GET /ysvmgetk.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:03:34 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:03:34 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:03:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785359014.6300110816955566406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:03:35 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 14802 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:03:35 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 14800 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:03:36 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 14800 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:03:37 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 14784 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:20 +0000] "GET /images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:23 +0000] "GET /storage/media/media/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:25 +0000] "GET /storage/storage/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:28 +0000] "GET /cgi-bin/cgi-bin/cgi-bin/cgi-bin/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:30 +0000] "GET /images/images/images/images/images/images/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:33 +0000] "GET /images/images/images/images/images/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:35 +0000] "GET /images/images/images/images/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:37 +0000] "GET /images/images/images/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:39 +0000] "GET /images/images/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:42 +0000] "GET /images/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 403 BYPASS - - [29/Jul/2026:21:05:44 +0000] "GET /wp-content/plugins/plugins/cache.php HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:46 +0000] "GET /assets/images/images/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:48 +0000] "GET /blogs/media/media/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 62.60.130.210 - - - 404 MISS - - [29/Jul/2026:21:05:50 +0000] "GET /cache/cache/cache.php HTTP/1.1" 492 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "62.60.130.210, 62.60.130.210, 62.60.130.210, 62.60.130.210" 148.113.130.90 - - - 200 BYPASS - - [29/Jul/2026:21:19:03 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "148.113.130.90, 148.113.130.90, 148.113.130.90, 148.113.130.90" 168.144.81.91 - - - 200 BYPASS - - [29/Jul/2026:21:21:32 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "168.144.81.91, 168.144.81.91, 168.144.81.91, 168.144.81.91" 168.144.81.91 - _uid=0100007FDC6E6A6A8BF0B71F026CD303 - 500 BYPASS - - [29/Jul/2026:21:21:35 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "168.144.81.91, 168.144.81.91, 168.144.81.91, 168.144.81.91" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:23:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785360215.5726389884948730468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 23.88.20.41 - _uid=0100007F58D4696A8BF0B71F02187203 - 301 MISS - - [29/Jul/2026:21:23:36 +0000] "GET /get-listed HTTP/1.1" 317 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "23.88.20.41, 23.88.20.41, 23.88.20.41, 23.88.20.41" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:23:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785360215.9201118946075439453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 23.88.20.41 - _uid=0100007F58D4696A8BF0B71F02187203 - 301 MISS - - [29/Jul/2026:21:23:36 +0000] "GET /red-light-therapy-finder HTTP/1.1" 331 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "23.88.20.41, 23.88.20.41, 23.88.20.41, 23.88.20.41" 23.88.20.41 - - - 200 MISS - - [29/Jul/2026:21:23:36 +0000] "GET /get-listed/ HTTP/1.1" 17075 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "23.88.20.41, 23.88.20.41, 23.88.20.41, 23.88.20.41" 23.88.20.41 - - - 200 MISS - - [29/Jul/2026:21:23:36 +0000] "GET /red-light-therapy-finder/ HTTP/1.1" 16027 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "23.88.20.41, 23.88.20.41, 23.88.20.41, 23.88.20.41" 23.88.20.41 - _uid=0100007F58D4696A8BF0B71F02187203 - 301 MISS - - [29/Jul/2026:21:23:36 +0000] "GET /x HTTP/1.1" 308 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "23.88.20.41, 23.88.20.41, 23.88.20.41, 23.88.20.41" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:23:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785360215.5815329551696777343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 194.5.48.198 - - - 403 BYPASS - - [29/Jul/2026:21:27:35 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.198, 194.5.48.198, 194.5.48.198, 194.5.48.198" 194.5.48.203 - - - 403 BYPASS - - [29/Jul/2026:21:27:35 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.203, 194.5.48.203, 194.5.48.203, 194.5.48.203" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:21:27:35 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 194.5.48.207 - - - 403 BYPASS - - [29/Jul/2026:21:27:35 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.207, 194.5.48.207, 194.5.48.207, 194.5.48.207" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:34:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785360889.1187000274658203125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 65.98.127.3 - - - 200 BYPASS - - [29/Jul/2026:21:34:49 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.127.3, 65.98.127.3, 65.98.127.3, 65.98.127.3" 65.98.127.3 - _uid=0100007FF9716A6A8BF0B71F029AD503 - 500 BYPASS - - [29/Jul/2026:21:34:50 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.127.3, 65.98.127.3, 65.98.127.3, 65.98.127.3" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:39:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785361150.1126170158386230468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.165.7.132 - - - 200 BYPASS - - [29/Jul/2026:21:39:10 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Ffindredlightnearme.com%2F HTTP/1.1" 1775 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.165.7.132, 43.165.7.132, 43.165.7.132, 43.165.7.132" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:49:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785361761.8529250621795654296875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.157.50.58 - - - 404 BYPASS - - [29/Jul/2026:21:49:22 +0000] "GET /wp-json/elementskit/v1/ HTTP/1.1" 791 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.157.50.58, 43.157.50.58, 43.157.50.58, 43.157.50.58" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:56:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785362201.5222709178924560546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 152.53.111.131 - - - 200 BYPASS - - [29/Jul/2026:21:56:42 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 152.53.111.131 - _uid=0100007F1A776A6A8BF0B71F0280D803 - 500 BYPASS - - [29/Jul/2026:21:56:46 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 152.53.111.131, 152.53.111.131, 152.53.111.131" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:22:03:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:22:03:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.207 - - - 403 BYPASS - - [29/Jul/2026:22:03:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.207, 194.5.48.207, 194.5.48.207, 194.5.48.207" 194.5.48.205 - - - 403 BYPASS - - [29/Jul/2026:22:03:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.205, 194.5.48.205, 194.5.48.205, 194.5.48.205" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:09:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785362955.8787539005279541015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 43.130.228.73 - - - 200 BYPASS - - [29/Jul/2026:22:09:16 +0000] "GET /wp-json/ HTTP/1.1" 25076 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.130.228.73, 43.130.228.73, 43.130.228.73, 43.130.228.73" 150.109.46.88 - - - 200 BYPASS - - [29/Jul/2026:22:18:00 +0000] "GET /wp-content/uploads/2022/11/Red-Light-Near-Me.webp HTTP/1.1" 4090 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "150.109.46.88, 150.109.46.88, 150.109.46.88, 150.109.46.88" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:43:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785365029.9140419960021972656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 65.181.111.156 - - - 200 BYPASS - - [29/Jul/2026:22:43:50 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.181.111.156, 65.181.111.156, 65.181.111.156, 65.181.111.156" 65.181.111.156 - _uid=0100007F26826A6A8BF0B71F0250DE03 - 500 BYPASS - - [29/Jul/2026:22:43:50 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.181.111.156, 65.181.111.156, 65.181.111.156, 65.181.111.156" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:22:44:01 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - _uid=0100007F31826A6A8BF0B71F0256DE03 - 500 BYPASS - - [29/Jul/2026:22:44:07 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:45:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785365105.5952730178833007812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:06 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 634 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:06 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 3380 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 3380 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 3380 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:46:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:47:10 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:48:10 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:49:12 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:49:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785365393.1801860332489013671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:50:12 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 195.250.23.158 - - - 200 BYPASS - - [29/Jul/2026:22:50:20 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.158, 195.250.23.158, 195.250.23.158, 195.250.23.158" 195.250.23.158 - _uid=0100007FAC836A6A8BF0B71F0230DF03 - 500 BYPASS - - [29/Jul/2026:22:50:21 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.158, 195.250.23.158, 195.250.23.158, 195.250.23.158" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:50:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785365455.3945751190185546875000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:51:14 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:51:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785365515.3958768844604492187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:52:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785365577.5421569347381591796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:53:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785365637.5803449153900146484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 142.44.220.174 - - - 200 BYPASS - - [29/Jul/2026:22:54:45 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "142.44.220.174, 142.44.220.174, 142.44.220.174, 142.44.220.174" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:55:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785365699.6933250427246093750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:56:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785365785.5913069248199462890625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:26 +0000] "GET /console/ HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:27 +0000] "GET /server HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:29 +0000] "GET /server-status HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:30 +0000] "GET /about HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:32 +0000] "GET /login.action HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 301 MISS - - [29/Jul/2026:22:56:34 +0000] "GET /___proxy_subdomain_whm/login HTTP/1.1" 432 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:35 +0000] "GET /___proxy_subdomain_cpanel HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:36 +0000] "GET /v2/_catalog HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:37 +0000] "GET /.DS_Store HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:39 +0000] "GET /.env HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:41 +0000] "GET /ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application HTTP/1.1" 14800 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:43 +0000] "GET /.git/config HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 BYPASS - - [29/Jul/2026:22:56:44 +0000] "POST /graphql HTTP/1.1" 14784 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 BYPASS - - [29/Jul/2026:22:56:45 +0000] "POST /api HTTP/1.1" 14784 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 BYPASS - - [29/Jul/2026:22:56:47 +0000] "POST /api/graphql HTTP/1.1" 14784 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 BYPASS - - [29/Jul/2026:22:56:48 +0000] "POST /graphql/api HTTP/1.1" 14784 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 BYPASS - - [29/Jul/2026:22:56:49 +0000] "POST /api/gql HTTP/1.1" 14784 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:51 +0000] "GET /s/335313e2631313e2633323e2237313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties HTTP/1.1" 14800 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:52 +0000] "GET /config.json HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:54 +0000] "GET /telescope/requests HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:55 +0000] "GET /info.php HTTP/1.1" 433 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:57 +0000] "GET /.well-known/security.txt HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:56:58 +0000] "GET /actuator/env HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:57:00 +0000] "GET /trace.axd HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:57:02 +0000] "GET /@vite/env HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:57:03 +0000] "GET /.vscode/sftp.json HTTP/1.1" 14782 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 405 BYPASS - - [29/Jul/2026:22:57:04 +0000] "OPTIONS / HTTP/1.1" 391 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 207 BYPASS - - [29/Jul/2026:22:57:06 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 207 BYPASS - - [29/Jul/2026:22:57:08 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1614 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 207 BYPASS - - [29/Jul/2026:22:57:09 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 207 BYPASS - - [29/Jul/2026:22:57:10 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 1614 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 200 MISS - - [29/Jul/2026:22:57:11 +0000] "GET /?rest_route=/wp/v2/users/ HTTP/1.1" 1237 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 206.81.24.227 - - - 404 MISS - - [29/Jul/2026:22:57:12 +0000] "GET /debug/default/view?panel=config HTTP/1.1" 14800 "-" "Mozilla/5.0 (l9scan/2.0.335313e2631313e2633323e2237313; +https://leakix.net)" "206.81.24.227, 206.81.24.227, 206.81.24.227, 206.81.24.227" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:23:08:50 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:23:08:50 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 194.5.48.180 - - - 403 BYPASS - - [29/Jul/2026:23:08:50 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.180, 194.5.48.180, 194.5.48.180, 194.5.48.180" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:23:08:50 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:20:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785367235.1511619091033935546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 192.250.227.149 - - - 200 BYPASS - - [29/Jul/2026:23:20:35 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.149, 192.250.227.149, 192.250.227.149, 192.250.227.149" 192.250.227.149 - _uid=0100007FC38A6A6A8BF0B71F02FFE503 - 500 BYPASS - - [29/Jul/2026:23:20:36 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.149, 192.250.227.149, 192.250.227.149, 192.250.227.149" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:27:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785367676.3550200462341308593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 104.43.52.173 - - - 200 BYPASS - - [29/Jul/2026:23:27:57 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "104.43.52.173, 104.43.52.173, 104.43.52.173, 104.43.52.173" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:31:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785367915.1254520416259765625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 103.39.93.98 - - - 200 BYPASS - - [29/Jul/2026:23:31:55 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.39.93.98, 103.39.93.98, 103.39.93.98, 103.39.93.98" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:34:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785368047.2956399917602539062500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 209.145.49.99 - - - 200 BYPASS - - [29/Jul/2026:23:34:07 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 209.145.49.99 - _uid=0100007FEF8D6A6A8BF0B71F02C8E903 - 500 BYPASS - - [29/Jul/2026:23:34:08 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:39:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785368379.9258289337158203125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 129.211.218.71 - - - 200 BYPASS - - [29/Jul/2026:23:39:40 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "129.211.218.71, 129.211.218.71, 129.211.218.71, 129.211.218.71" 129.211.218.71 - _uid=0100007F3C8F6A6A8BF0B71F029BEB03 - 500 BYPASS - - [29/Jul/2026:23:39:41 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "129.211.218.71, 129.211.218.71, 129.211.218.71, 129.211.218.71" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:41:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785368482.0990169048309326171875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 141.98.11.42 - - - 207 BYPASS - - [29/Jul/2026:23:41:22 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1238 "-" "wp2shell" "141.98.11.42, 141.98.11.42, 141.98.11.42, 141.98.11.42" 141.98.11.42 - - - 207 BYPASS - - [29/Jul/2026:23:41:24 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 339327 "-" "wp2shell" "141.98.11.42, 141.98.11.42, 141.98.11.42, 141.98.11.42" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:44:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785368640.8379580974578857421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:23:44:01 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - _uid=0100007F41906A6A8BF0B71F02B5EC03 - 500 BYPASS - - [29/Jul/2026:23:44:02 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:48:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785368931.5414330959320068359375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 5.182.209.54 - - - 200 BYPASS - - [29/Jul/2026:23:48:52 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.182.209.54, 5.182.209.54, 5.182.209.54, 5.182.209.54" 5.182.209.54 - _uid=0100007F64916A6A8BF0B71F024FEE03 - 500 BYPASS - - [29/Jul/2026:23:48:52 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.182.209.54, 5.182.209.54, 5.182.209.54, 5.182.209.54" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:59:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785369555.8302540779113769531250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://findredlightnearme.com" "37.27.122.165, 37.27.122.165, 37.27.122.165, 37.27.122.165" 119.195.102.159 - - - 200 BYPASS - - [29/Jul/2026:23:59:16 +0000] "GET /wp-login.php HTTP/1.1" 2752 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159" 119.195.102.159 - _uid=0100007FD4936A6A8BF0B71F02A3F003 - 500 BYPASS - - [29/Jul/2026:23:59:17 +0000] "POST /wp-login.php HTTP/1.1" 3375 "https://findredlightnearme.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159"
修改文件时间
将文件时间修改为当前时间的前一年
删除文件