文件操作 - redlightpain.log

文件: /storage/v12552/redlightpain/logs/redlightpain.log

编辑文件内容

52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:26 +0000] "GET /inputs.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:27 +0000] "GET /admin.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:27 +0000] "GET /goods.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:27 +0000] "GET /file.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:27 +0000] "GET /adminfuns.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:28 +0000] "GET /404.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:28 +0000] "GET /wk/index.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:28 +0000] "GET /about.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:28 +0000] "GET /term.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:29 +0000] "GET /ioxi-o.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:29 +0000] "GET /1.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:29 +0000] "GET /alfa.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:29 +0000] "GET /edit.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:30 +0000] "GET /elp.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:30 +0000] "GET /classwithtostring.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:30 +0000] "GET /666.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:12:32 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:12:32 +0000] "POST /wp-cron.php?doing_wp_cron=1785370352.1528759002685546875000 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
52.238.199.152 - - - 302 BYPASS  - - [30/Jul/2026:00:12:32 +0000] "GET /wp-admin/ HTTP/1.1"  600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:33 +0000] "GET /ws54.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:33 +0000] "GET /deepseek_d.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:33 +0000] "GET /function/function.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:33 +0000] "GET /nw.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:34 +0000] "GET /xleet.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:34 +0000] "GET /wp.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:34 +0000] "GET /155.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:34 +0000] "GET /96i.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:35 +0000] "GET /as.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:35 +0000] "GET /min.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:36 +0000] "GET /.well-known/ HTTP/1.1"  7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:36 +0000] "GET /php8.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:36 +0000] "GET /wp-content/admin.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:37 +0000] "GET /222.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:37 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:37 +0000] "GET /info.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:37 +0000] "GET /a.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:38 +0000] "GET /chosen.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:38 +0000] "GET /wp-content/index.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:38 +0000] "GET /vx.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:39 +0000] "GET /admin/controller/extension/ HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:39 +0000] "GET /wap.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS  - - [30/Jul/2026:00:12:40 +0000] "GET /wp-admin/wp.php HTTP/1.1"  387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:40 +0000] "GET /bgymj.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:40 +0000] "GET /aa.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 MISS  - - [30/Jul/2026:00:12:41 +0000] "GET /wp-mail.php HTTP/1.1"  1498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:41 +0000] "GET /bolt.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:41 +0000] "GET /bthil.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:42 +0000] "GET /cgi-bin/ HTTP/1.1"  7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:43 +0000] "GET /x.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:43 +0000] "GET /index/function.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:43 +0000] "GET /aaa.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:43 +0000] "GET /abcd.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:44 +0000] "GET /wp-good.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:44 +0000] "GET /simple.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:44 +0000] "GET /edit-tags.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:44 +0000] "GET /u.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:45 +0000] "GET /wp-content/themes/admin.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:45 +0000] "GET /h.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:45 +0000] "GET /ms-edit.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:45 +0000] "GET /a7.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:46 +0000] "GET /manager.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:46 +0000] "GET /w1.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:46 +0000] "GET /wp-includes/fonts/ HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 200 BYPASS  - - [30/Jul/2026:00:12:47 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:47 +0000] "GET /default.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:47 +0000] "GET /i.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:48 +0000] "GET /wp-content/uploads/ HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:48 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:48 +0000] "GET /wp-content/themes/index.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:48 +0000] "GET /gecko-new.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:49 +0000] "GET /NewFile.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:49 +0000] "GET /wp-Blogs.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:49 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:50 +0000] "GET /themes.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:50 +0000] "GET /cv.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:50 +0000] "GET /wp-admin/js/ HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:50 +0000] "GET /wp-content/uploads/index.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:51 +0000] "GET /ws83.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:51 +0000] "GET /atex1.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:51 +0000] "GET /class-t.api.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:51 +0000] "GET /w.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:52 +0000] "GET /archive.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:52 +0000] "GET /bless.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:52 +0000] "GET /sagax1.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:52 +0000] "GET /wpc.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:53 +0000] "GET /fone1.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:53 +0000] "GET /ncx.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS  - - [30/Jul/2026:00:12:53 +0000] "GET /wp-admin/js/index.php HTTP/1.1"  387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:53 +0000] "GET /wso.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:54 +0000] "GET /zup.php73 HTTP/1.1"  7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:54 +0000] "GET /k.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:55 +0000] "GET /wp-blink.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:56 +0000] "GET /randkeyword.PhP7 HTTP/1.1"  7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:56 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS  - - [30/Jul/2026:00:12:56 +0000] "GET /wp-content/ HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:56 +0000] "GET /ww5.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:57 +0000] "GET /2.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS  - - [30/Jul/2026:00:12:57 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1"  387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:57 +0000] "GET /atomlib.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:57 +0000] "GET /rip.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:58 +0000] "GET /p.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS  - - [30/Jul/2026:00:12:58 +0000] "GET /php.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
154.26.129.62 - - - 200 BYPASS  - - [30/Jul/2026:00:13:06 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.26.129.62, 154.26.129.62, 154.26.129.62, 154.26.129.62"
154.26.129.62 - - - 200 BYPASS  - - [30/Jul/2026:00:13:12 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.26.129.62"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:47 +0000] "GET /admin.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:48 +0000] "GET /edit.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:48 +0000] "GET /w.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:48 +0000] "GET /file.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:49 +0000] "GET /adminfuns.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:49 +0000] "GET /aa.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:49 +0000] "GET /classwithtostring.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:49 +0000] "GET /about.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:50 +0000] "GET /goods.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:50 +0000] "GET /php8.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:50 +0000] "GET /info.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:50 +0000] "GET /chosen.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:50 +0000] "GET /simple.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:51 +0000] "GET /ioxi-o.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:51 +0000] "GET /av.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 301 BYPASS  - - [30/Jul/2026:00:29:51 +0000] "GET /wp-admin HTTP/1.1"  486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:51 +0000] "GET /wp.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:52 +0000] "GET /file2.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:52 +0000] "GET /images/class-config.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:52 +0000] "GET /alfa.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:52 +0000] "GET /1.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:53 +0000] "GET /222.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:53 +0000] "GET /asasx.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:53 +0000] "GET /filemanager.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:53 +0000] "GET /themes.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 403 BYPASS  - - [30/Jul/2026:00:29:54 +0000] "GET /wp-content/admin.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:54 +0000] "GET /buy.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:54 +0000] "GET /dropdown.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:54 +0000] "GET /inputs.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:55 +0000] "GET /100.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:55 +0000] "GET /akc.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:56 +0000] "GET /autoload_classmap/function.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:56 +0000] "GET /php.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:56 +0000] "GET /t.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:56 +0000] "GET /index/function.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:57 +0000] "GET /wk/index.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:57 +0000] "GET /wp-blink.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:57 +0000] "GET /xfun.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:57 +0000] "GET /p.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 403 BYPASS  - - [30/Jul/2026:00:29:58 +0000] "GET /wp-content/themes/admin.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:58 +0000] "GET /aaa.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:58 +0000] "GET /term.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:58 +0000] "GET /7.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:59 +0000] "GET /file5.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:29:59 +0000] "GET /makeasmtp.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 403 BYPASS  - - [30/Jul/2026:00:29:59 +0000] "GET /wp-content/index.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:29:59 +0000] "GET /atomlib.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 HIT  - - [30/Jul/2026:00:30:00 +0000] "GET /min.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:30:00 +0000] "GET /mac.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS  - - [30/Jul/2026:00:30:00 +0000] "GET /nc4.php HTTP/1.1"  492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
194.5.48.161 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161"
194.5.48.170 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170"
194.5.48.169 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.169, 194.5.48.169, 194.5.48.169, 194.5.48.169"
194.5.48.162 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162"
194.5.48.159 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159"
194.5.48.173 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.173, 194.5.48.173, 194.5.48.173, 194.5.48.173"
194.5.48.175 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.175, 194.5.48.175, 194.5.48.175, 194.5.48.175"
194.5.48.167 - - - 403 BYPASS  - - [30/Jul/2026:00:30:17 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:30:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785371449.0592880249023437500000 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
119.195.102.159 - - - 200 BYPASS  - - [30/Jul/2026:00:30:49 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159"
193.148.56.177 - - - 200 BYPASS  - - [30/Jul/2026:00:30:56 +0000] "GET /wp-json/ HTTP/1.1"  21483 "https://www.bing.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:33:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785371618.7118508815765380859375 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
107.189.29.12 - - - 200 BYPASS  - - [30/Jul/2026:00:33:39 +0000] "GET /wp-login.php HTTP/1.1"  6463 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.29.12 - _uid=0100007FE39B6A6A869867AE02510C03 - 200 BYPASS  - - [30/Jul/2026:00:33:40 +0000] "GET /wp-admin/ HTTP/1.1"  153 "-" "python-requests/2.33.1" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.29.12 - - - 444 BYPASS  - - [30/Jul/2026:00:33:42 +0000] "GET /wp-login.php HTTP/1.1"  0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.14.87 - - - 444 BYPASS  - - [30/Jul/2026:00:33:57 +0000] "POST /wp-login.php HTTP/1.1"  0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87"
107.189.14.87 - - - 200 BYPASS  - - [30/Jul/2026:00:33:58 +0000] "GET /wp-admin/ HTTP/1.1"  241 "-" "python-requests/2.34.2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:36:03 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:36:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785371763.4912130832672119140625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
107.189.14.87 - - - 302 BYPASS  - - [30/Jul/2026:00:36:04 +0000] "GET /wp-admin/plugin-install.php?tab=upload HTTP/1.1"  633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87"
107.189.14.87 - - - 200 BYPASS  - - [30/Jul/2026:00:36:05 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fplugin-install.php%3Ftab%3Dupload&reauth=1 HTTP/1.1"  8542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:38:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785371888.3246960639953613281250 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
193.148.56.177 - - - 207 BYPASS  - - [30/Jul/2026:00:38:08 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25202 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:10 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25302 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:11 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25351 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:12 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25222 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 200 BYPASS  - - [30/Jul/2026:00:38:13 +0000] "GET /wp-json/wp/v2/pages?per_page=1&_fields=link HTTP/1.1"  690 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 200 BYPASS  - - [30/Jul/2026:00:38:14 +0000] "GET /wp-json/wp/v2/posts?per_page=1&_fields=link HTTP/1.1"  784 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:15 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  6010 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:16 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25298 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:17 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:19 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25291 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:20 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  4908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 207 BYPASS  - - [30/Jul/2026:00:38:21 +0000] "POST /wp-json/batch/v1 HTTP/1.1"  25313 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FF09C6A6A869867AE02580D03 - 200 BYPASS  - - [30/Jul/2026:00:38:22 +0000] "GET /wp-login.php HTTP/1.1"  2471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:40:44 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:40:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785372044.1852340698242187500000 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
107.189.29.12 - - - 302 BYPASS  - - [30/Jul/2026:00:40:44 +0000] "GET /wp-admin/plugin-install.php?tab=upload HTTP/1.1"  633 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.29.12 - - - 200 BYPASS  - - [30/Jul/2026:00:40:45 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fplugin-install.php%3Ftab%3Dupload&reauth=1 HTTP/1.1"  8542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:42:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785372133.7799279689788818359375 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
184.168.126.180 - - - 200 BYPASS  - - [30/Jul/2026:00:42:14 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180"
184.168.126.180 - - - 200 BYPASS  - - [30/Jul/2026:00:42:18 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180"
107.189.14.87 - _uid=0100007F749C6A6A869867AE02D20C03 - 200 BYPASS  - - [30/Jul/2026:00:42:29 +0000] "GET /wp-admin/themes.php HTTP/1.1"  153 "-" "python-requests/2.34.2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87"
37.27.122.165 - _uid=0100007F749C6A6A869867AE02D20C03 - 200 BYPASS  - - [30/Jul/2026:00:42:30 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
107.189.14.87 - _uid=0100007F749C6A6A869867AE02D20C03 - 302 BYPASS  - - [30/Jul/2026:00:42:30 +0000] "GET /wp-admin/ HTTP/1.1"  512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87"
107.189.14.87 - _uid=0100007F759C6A6A869867AE02D60C03 - 200 BYPASS  - - [30/Jul/2026:00:42:31 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1"  8425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87"
107.189.14.87 - _uid=0100007F749C6A6A869867AE02D20C03 - 302 BYPASS  - - [30/Jul/2026:00:42:37 +0000] "POST /wp-admin/update.php?action=upload-plugin HTTP/1.1"  536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87"
107.189.14.87 - _uid=0100007F759C6A6A869867AE02D60C03 - 200 BYPASS  - - [30/Jul/2026:00:42:38 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fupdate.php%3Faction%3Dupload-plugin&reauth=1 HTTP/1.1"  8456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.14.87"
107.189.29.12 - _uid=0100007F8C9D6A6A869867AE02EB0D03 - 200 BYPASS  - - [30/Jul/2026:00:43:08 +0000] "GET /wp-admin/themes.php HTTP/1.1"  153 "-" "python-requests/2.33.1" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.29.12 - _uid=0100007F8C9D6A6A869867AE02EB0D03 - 302 BYPASS  - - [30/Jul/2026:00:43:09 +0000] "GET /wp-admin/ HTTP/1.1"  512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.29.12 - _uid=0100007F8D9D6A6A869867AE02ED0D03 - 200 BYPASS  - - [30/Jul/2026:00:43:10 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1"  8425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12"
37.27.122.165 - _uid=0100007F8C9D6A6A869867AE02EB0D03 - 200 BYPASS  - - [30/Jul/2026:00:43:40 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:00:43:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785372221.1031250953674316406250 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
107.189.29.12 - _uid=0100007F8C9D6A6A869867AE02EB0D03 - 302 BYPASS  - - [30/Jul/2026:00:43:41 +0000] "POST /wp-admin/update.php?action=upload-plugin HTTP/1.1"  536 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12, 107.189.29.12, 107.189.29.12, 107.189.29.12"
107.189.29.12 - _uid=0100007F8D9D6A6A869867AE02ED0D03 - 200 BYPASS  - - [30/Jul/2026:00:43:42 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fupdate.php%3Faction%3Dupload-plugin&reauth=1 HTTP/1.1"  8456 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" "107.189.29.12"
193.148.56.177 - - - 200 BYPASS  - - [30/Jul/2026:00:58:49 +0000] "POST /wp-admin/admin-ajax.php?action=updraft_central_ajaxcallback HTTP/1.1"  241 "-" "python-requests/2.34.2" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FC9A16A6A869867AE02E01103 - 200 BYPASS  - - [30/Jul/2026:00:58:51 +0000] "GET /wp-content/plugins/wp_gcxbuqq/wp_gcxbuqq.php HTTP/1.1"  153 "-" "python-requests/2.34.2" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FC9A16A6A869867AE02E01103 - 200 BYPASS  - - [30/Jul/2026:00:58:52 +0000] "GET /wp-content/plugins/wp_gcxbuqq/wp_gcxbuqq.php HTTP/1.1"  153 "-" "python-requests/2.34.2" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FC9A16A6A869867AE02E01103 - 200 BYPASS  - - [30/Jul/2026:00:58:53 +0000] "GET /wp-content/plugins/wp_gcxbuqq/wp_gcxbuqq.php HTTP/1.1"  153 "-" "python-requests/2.34.2" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FC9A16A6A869867AE02E01103 - 200 BYPASS  - - [30/Jul/2026:00:58:55 +0000] "GET /wp-content/plugins/wp_gcxbuqq/wp_gcxbuqq.php HTTP/1.1"  153 "-" "python-requests/2.34.2" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
193.148.56.177 - _uid=0100007FC9A16A6A869867AE02E01103 - 200 BYPASS  - - [30/Jul/2026:00:58:56 +0000] "GET /wp-content/plugins/wp_gcxbuqq/wp_gcxbuqq.php HTTP/1.1"  153 "-" "python-requests/2.34.2" "193.148.56.177, 193.148.56.177, 193.148.56.177, 193.148.56.177"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:01:05:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785373553.0708639621734619140625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
130.49.114.181 - - - 200 MISS  - - [30/Jul/2026:01:05:53 +0000] "GET / HTTP/1.1"  31420 "-" "wp2shell" "130.49.114.181, 130.49.114.181, 130.49.114.181, 130.49.114.181"
130.49.114.181 - - - 200 BYPASS  - - [30/Jul/2026:01:05:57 +0000] "GET /wp-json/ HTTP/1.1"  338886 "-" "wp2shell" "130.49.114.181, 130.49.114.181, 130.49.114.181, 130.49.114.181"
130.49.114.181 - - - 207 BYPASS  - - [30/Jul/2026:01:06:02 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  25184 "-" "wp2shell" "130.49.114.181, 130.49.114.181, 130.49.114.181, 130.49.114.181"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:01:09:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785373753.2340190410614013671875 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
144.16.144.93 - - - 200 BYPASS  - - [30/Jul/2026:01:09:13 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.16.144.93, 144.16.144.93, 144.16.144.93, 144.16.144.93"
144.16.144.93 - - - 200 BYPASS  - - [30/Jul/2026:01:09:15 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.16.144.93"
43.228.157.250 - - - 403 BYPASS  - - [30/Jul/2026:01:25:11 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 403 BYPASS  - - [30/Jul/2026:01:25:11 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1"  467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 404 MISS  - - [30/Jul/2026:01:25:11 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1"  492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 404 BYPASS  - - [30/Jul/2026:01:25:12 +0000] "POST /wp-plain.php HTTP/1.1"  376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 404 MISS  - - [30/Jul/2026:01:25:12 +0000] "GET /lpzroyrd.php?Fox=d3wL7 HTTP/1.1"  492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:01:25:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785374712.1858890056610107421875 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
43.228.157.250 - - - 404 BYPASS  - - [30/Jul/2026:01:25:12 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1"  7207 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 404 MISS  - - [30/Jul/2026:01:25:12 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1"  7205 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 404 MISS  - - [30/Jul/2026:01:25:14 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1"  7205 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 404 BYPASS  - - [30/Jul/2026:01:25:15 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1"  7196 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
43.228.157.250 - - - 403 BYPASS  - - [30/Jul/2026:01:25:16 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1"  467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.250, 43.228.157.250, 43.228.157.250, 43.228.157.250"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:01:34:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785375271.3513960838317871093750 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
62.210.185.4 - - - 200 BYPASS  - - [30/Jul/2026:01:34:32 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "62.210.185.4, 62.210.185.4, 62.210.185.4, 62.210.185.4"
62.210.185.4 - - - 200 BYPASS  - - [30/Jul/2026:01:34:33 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "62.210.185.4"
188.245.84.194 - - - 403 BYPASS  - - [30/Jul/2026:01:55:12 +0000] "GET /wp-content/wplog.php?root=admin888 HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "188.245.84.194, 188.245.84.194, 188.245.84.194, 188.245.84.194"
43.228.157.245 - - - 403 BYPASS  - - [30/Jul/2026:01:57:06 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1"  467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 403 BYPASS  - - [30/Jul/2026:01:57:06 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 404 BYPASS  - - [30/Jul/2026:01:57:06 +0000] "POST /wp-plain.php HTTP/1.1"  376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 403 BYPASS  - - [30/Jul/2026:01:57:07 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1"  467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 404 MISS  - - [30/Jul/2026:01:57:07 +0000] "GET /itsofkhh.php?Fox=d3wL7 HTTP/1.1"  492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:01:57:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785376627.4622309207916259765625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
43.228.157.245 - - - 404 BYPASS  - - [30/Jul/2026:01:57:08 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1"  7207 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 403 BYPASS  - - [30/Jul/2026:01:57:09 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1"  467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 404 HIT  - - [30/Jul/2026:01:57:10 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1"  491 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 404 HIT  - - [30/Jul/2026:01:57:10 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1"  7204 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 404 HIT  - - [30/Jul/2026:01:57:10 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1"  7204 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
43.228.157.245 - - - 404 BYPASS  - - [30/Jul/2026:01:57:11 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1"  7196 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.245, 43.228.157.245, 43.228.157.245, 43.228.157.245"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:51 +0000] "GET /admin.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:51 +0000] "GET /edit.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:52 +0000] "GET /w.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:52 +0000] "GET /file.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:52 +0000] "GET /adminfuns.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:52 +0000] "GET /aa.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:53 +0000] "GET /classwithtostring.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:53 +0000] "GET /about.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:53 +0000] "GET /goods.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:53 +0000] "GET /php8.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:53 +0000] "GET /info.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:54 +0000] "GET /chosen.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:54 +0000] "GET /simple.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:54 +0000] "GET /ioxi-o.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:54 +0000] "GET /av.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 301 BYPASS  - - [30/Jul/2026:02:06:55 +0000] "GET /wp-admin HTTP/1.1"  486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:55 +0000] "GET /wp.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:55 +0000] "GET /file2.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:55 +0000] "GET /images/class-config.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:56 +0000] "GET /alfa.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:56 +0000] "GET /1.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:56 +0000] "GET /222.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:56 +0000] "GET /asasx.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:57 +0000] "GET /filemanager.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:57 +0000] "GET /themes.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 403 BYPASS  - - [30/Jul/2026:02:06:57 +0000] "GET /wp-content/admin.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:57 +0000] "GET /buy.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:58 +0000] "GET /dropdown.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:58 +0000] "GET /inputs.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:58 +0000] "GET /100.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:58 +0000] "GET /akc.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:59 +0000] "GET /autoload_classmap/function.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:59 +0000] "GET /php.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:59 +0000] "GET /t.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:06:59 +0000] "GET /index/function.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:00 +0000] "GET /wk/index.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:00 +0000] "GET /wp-blink.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:00 +0000] "GET /xfun.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:00 +0000] "GET /p.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 403 BYPASS  - - [30/Jul/2026:02:07:01 +0000] "GET /wp-content/themes/admin.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:01 +0000] "GET /aaa.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:01 +0000] "GET /term.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:01 +0000] "GET /7.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:02 +0000] "GET /file5.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:02 +0000] "GET /makeasmtp.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 403 BYPASS  - - [30/Jul/2026:02:07:02 +0000] "GET /wp-content/index.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:02 +0000] "GET /atomlib.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:03 +0000] "GET /min.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:03 +0000] "GET /mac.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
172.202.95.21 - - - 404 HIT  - - [30/Jul/2026:02:07:03 +0000] "GET /nc4.php HTTP/1.1"  491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:02:14:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785377674.7153909206390380859375 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
184.168.126.180 - - - 200 BYPASS  - - [30/Jul/2026:02:14:35 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180"
184.168.126.180 - - - 200 BYPASS  - - [30/Jul/2026:02:14:49 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180"
185.242.3.192 - - - 200 BYPASS  - - [30/Jul/2026:02:26:03 +0000] "GET /txets.php HTTP/1.1"  241 "https://www.redlightpain.com/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192"
185.242.3.192 - - - 200 BYPASS  - - [30/Jul/2026:02:26:04 +0000] "GET /wp-content/txets.php HTTP/1.1"  241 "https://www.redlightpain.com/wp-content/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192"
185.242.3.192 - - - 200 BYPASS  - - [30/Jul/2026:02:26:06 +0000] "GET /wp-admin/txets.php HTTP/1.1"  241 "https://www.redlightpain.com/wp-admin/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:02:33:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785378835.5762178897857666015625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
216.236.40.21 - - - 302 BYPASS  - - [30/Jul/2026:02:33:56 +0000] "POST /wp-login.php HTTP/1.1"  1538 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21"
216.236.40.21 - - - 302 BYPASS  - - [30/Jul/2026:02:33:57 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1"  797 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "216.236.40.21"
216.236.40.21 - _uid=0100007F15B86A6A869867AE02322A03 - 200 BYPASS  - - [30/Jul/2026:02:33:58 +0000] "GET /wp-login.php HTTP/1.1"  6380 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "216.236.40.21"
216.236.40.21 - - - 302 BYPASS  - - [30/Jul/2026:02:33:59 +0000] "POST /wp-login.php HTTP/1.1"  1552 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "216.236.40.21"
37.27.122.165 - _uid=0100007F17B86A6A869867AE02332A03 - 200 BYPASS  - - [30/Jul/2026:02:34:02 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=c55bb6c025 HTTP/1.1"  153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
216.236.40.21 - _uid=0100007F17B86A6A869867AE02332A03 - 500 BYPASS  - - [30/Jul/2026:02:34:02 +0000] "GET /wp-admin/ HTTP/1.1"  3155 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "216.236.40.21"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:03:13:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785381194.4237220287322998046875 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
190.92.174.190 - - - 200 BYPASS  - - [30/Jul/2026:03:13:15 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.190, 190.92.174.190, 190.92.174.190, 190.92.174.190"
190.92.174.190 - - - 200 BYPASS  - - [30/Jul/2026:03:13:35 +0000] "GET /wp-login.php HTTP/1.1"  6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.190"
190.92.174.190 - _uid=0100007F5FC16A6A889867AE020C0C03 - 200 BYPASS  - - [30/Jul/2026:03:13:36 +0000] "POST /wp-login.php HTTP/1.1"  6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.92.174.190"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:03:30:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785382237.8380351066589355468750 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
213.171.211.213 - - - 200 BYPASS  - - [30/Jul/2026:03:30:38 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:03:40:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785382807.2976529598236083984375 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
51.79.65.194 - - - 200 BYPASS  - - [30/Jul/2026:03:40:07 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "51.79.65.194, 51.79.65.194, 51.79.65.194, 51.79.65.194"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:04:02:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785384165.0867791175842285156250 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:45 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:47 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3204 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:49 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  5901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:51 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:52 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:54 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:56 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:02:58 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:03:00 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:03:01 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3166 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:03:03 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  3192 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:03:05 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  20165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
45.148.10.244 - - - 207 BYPASS  - - [30/Jul/2026:04:03:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1"  5225 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "45.148.10.244, 45.148.10.244, 45.148.10.244, 45.148.10.244"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:04:23:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785385391.1129519939422607421875 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
194.61.28.72 - - - 200 BYPASS  - - [30/Jul/2026:04:23:11 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.61.28.72, 194.61.28.72, 194.61.28.72, 194.61.28.72"
62.60.130.235 - - - 200 BYPASS  - - [30/Jul/2026:04:23:18 +0000] "POST /wp-login.php HTTP/1.1"  3415 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" "62.60.130.235, 62.60.130.235, 62.60.130.235, 62.60.130.235"
37.27.122.165 - _uid=0100007FB6D16A6A869867AE024D3903 - 200 BYPASS  - - [30/Jul/2026:04:23:20 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=3661cccfda HTTP/1.1"  153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
62.60.130.235 - _uid=0100007FB6D16A6A869867AE024D3903 - 500 BYPASS  - - [30/Jul/2026:04:23:20 +0000] "GET /wp-admin/index.php HTTP/1.1"  3149 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" "62.60.130.235, 62.60.130.235, 62.60.130.235, 62.60.130.235"
62.60.130.235 - _uid=0100007FB6D16A6A869867AE024D3903 - 500 BYPASS  - - [30/Jul/2026:04:23:21 +0000] "GET /wp-admin/index.php HTTP/1.1"  3149 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.71 Safari/537.36" "62.60.130.235, 62.60.130.235, 62.60.130.235, 62.60.130.235"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:04:34:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785386088.2139370441436767578125 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
77.237.236.225 - - - 200 BYPASS  - - [30/Jul/2026:04:34:48 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "77.237.236.225, 77.237.236.225, 77.237.236.225, 77.237.236.225"
77.237.236.225 - - - 200 BYPASS  - - [30/Jul/2026:04:35:00 +0000] "GET /wp-login.php HTTP/1.1"  6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "77.237.236.225"
77.237.236.225 - _uid=0100007F74D46A6A869867AE02203B03 - 200 BYPASS  - - [30/Jul/2026:04:35:01 +0000] "POST /wp-login.php HTTP/1.1"  6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "77.237.236.225"
217.182.128.41 - - - 200 BYPASS  - - [30/Jul/2026:04:35:23 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41"
217.182.128.41 - - - 200 BYPASS  - - [30/Jul/2026:04:35:24 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:05:43:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785390200.5173819065093994140625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
27.124.10.134 - - - 200 MISS  - - [30/Jul/2026:05:43:21 +0000] "GET /feed/ HTTP/1.1"  1826 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 403 BYPASS  - - [30/Jul/2026:05:43:21 +0000] "GET /wp-content/uploads/ HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 403 BYPASS  - - [30/Jul/2026:05:43:29 +0000] "GET /wp-content/plugins/premium-addons-for-elementor/readme.txt HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 404 MISS  - - [30/Jul/2026:05:43:31 +0000] "GET /wp-content/plugins/premium-addons-for-elementor/Readme.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 404 MISS  - - [30/Jul/2026:05:43:33 +0000] "GET /wp-content/plugins/premium-addons-for-elementor/README.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 403 BYPASS  - - [30/Jul/2026:05:43:33 +0000] "GET /wp-content/plugins/elementor/readme.txt HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 404 MISS  - - [30/Jul/2026:05:43:36 +0000] "GET /wp-content/plugins/elementor/Readme.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 404 MISS  - - [30/Jul/2026:05:43:39 +0000] "GET /wp-content/plugins/elementor/README.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 403 BYPASS  - - [30/Jul/2026:05:43:44 +0000] "GET /wp-content/plugins/essential-addons-for-elementor-lite/readme.txt HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 404 MISS  - - [30/Jul/2026:05:43:51 +0000] "GET /wp-content/plugins/essential-addons-for-elementor-lite/Readme.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 404 MISS  - - [30/Jul/2026:05:43:53 +0000] "GET /wp-content/plugins/essential-addons-for-elementor-lite/README.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
27.124.10.134 - - - 200 BYPASS  - - [30/Jul/2026:05:43:55 +0000] "GET /wp-content/themes/hello-elementor/style.css HTTP/1.1"  4162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "27.124.10.134, 27.124.10.134, 27.124.10.134, 27.124.10.134"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:05:51:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785390660.3408169746398925781250 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
108.179.194.35 - - - 200 BYPASS  - - [30/Jul/2026:05:51:01 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35, 108.179.194.35, 108.179.194.35, 108.179.194.35"
108.179.194.35 - - - 200 BYPASS  - - [30/Jul/2026:05:51:14 +0000] "GET /wp-login.php HTTP/1.1"  6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35"
108.179.194.35 - _uid=0100007F52E66A6A889867AE026E1103 - 200 BYPASS  - - [30/Jul/2026:05:51:16 +0000] "POST /wp-login.php HTTP/1.1"  6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35"
161.35.81.63 - - - 404 BYPASS  - - [30/Jul/2026:05:58:45 +0000] "GET /favicon.ico HTTP/1.1"  469 "https://redlightpain.com/" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "161.35.81.63, 161.35.81.63, 161.35.81.63, 161.35.81.63"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:06:03:32 +0000] "POST /wp-cron.php?doing_wp_cron=1785391411.7693109512329101562500 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
213.171.211.213 - - - 200 BYPASS  - - [30/Jul/2026:06:03:32 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:06:42:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785393757.6741569042205810546875 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
51.158.144.117 - - - 200 MISS  - - [30/Jul/2026:06:42:38 +0000] "GET /index.php?author=1 HTTP/1.1"  7621 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" "51.158.144.117, 51.158.144.117, 51.158.144.117, 51.158.144.117"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:13:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785395598.7336640357971191406250 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
45.32.151.65 - - - 404 MISS  - - [30/Jul/2026:07:13:19 +0000] "GET /wp-content/plugins/admin-site-enhancements-pro/README.txt HTTP/1.1"  7205 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" "45.32.151.65, 45.32.151.65, 45.32.151.65, 45.32.151.65"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:23:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785396181.9806859493255615234375 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
193.24.211.70 - - - 200 BYPASS  - - [30/Jul/2026:07:23:02 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "193.24.211.70, 193.24.211.70, 193.24.211.70, 193.24.211.70"
103.109.57.38 - - - 403 BYPASS  - - [30/Jul/2026:07:23:07 +0000] "POST /xmlrpc.php HTTP/1.1"  385 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "103.109.57.38, 103.109.57.38, 103.109.57.38, 103.109.57.38"
95.58.2.145 - - - 200 BYPASS  - - [30/Jul/2026:07:23:12 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "95.58.2.145, 95.58.2.145, 95.58.2.145, 95.58.2.145"
103.178.169.156 - - - 200 BYPASS  - - [30/Jul/2026:07:23:16 +0000] "POST /wp-login.php?wp_lang=en_US HTTP/1.1"  7567 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "103.178.169.156"
103.235.92.98 - - - 200 BYPASS  - - [30/Jul/2026:07:23:18 +0000] "GET /wp-login.php?wp_lang=en_US HTTP/1.1"  6521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "103.235.92.98"
103.235.92.98 - _uid=0100007FE6FB6A6A869867AE02755903 - 302 BYPASS  - - [30/Jul/2026:07:23:20 +0000] "POST /wp-login.php?wp_lang=en_US HTTP/1.1"  1503 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "103.235.92.98"
103.235.92.98 - _uid=0100007FE6FB6A6A869867AE02755903 - 200 BYPASS  - - [30/Jul/2026:07:23:21 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1"  4131 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "103.235.92.98"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:23:24 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
112.208.172.11 - - - 302 BYPASS  - - [30/Jul/2026:07:23:24 +0000] "GET /wp-admin/ HTTP/1.1"  600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "112.208.172.11, 112.208.172.11, 112.208.172.11, 112.208.172.11"
103.235.92.98 - _uid=0100007FE6FB6A6A869867AE02755903 - 200 BYPASS  - - [30/Jul/2026:07:23:26 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1"  8452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "103.235.92.98"
112.208.172.11 - _uid=0100007FECFB6A6A889867AE02CD1403 - 302 BYPASS  - - [30/Jul/2026:07:23:27 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "112.208.172.11, 112.208.172.11, 112.208.172.11, 112.208.172.11"
103.235.92.98 - _uid=0100007FE6FB6A6A869867AE02755903 - 200 BYPASS  - - [30/Jul/2026:07:23:28 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fplugin-install.php&reauth=1 HTTP/1.1"  8470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "103.235.92.98"
112.208.172.11 - _uid=0100007FECFB6A6A889867AE02CD1403 - 302 BYPASS  - - [30/Jul/2026:07:23:29 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "112.208.172.11, 112.208.172.11, 112.208.172.11, 112.208.172.11"
103.235.92.98 - _uid=0100007FE6FB6A6A869867AE02755903 - 200 BYPASS  - - [30/Jul/2026:07:23:30 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fplugin-install.php&reauth=1 HTTP/1.1"  8470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "103.235.92.98"
112.208.172.11 - _uid=0100007FECFB6A6A889867AE02CD1403 - 302 BYPASS  - - [30/Jul/2026:07:23:32 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "112.208.172.11, 112.208.172.11, 112.208.172.11, 112.208.172.11"
112.208.172.11 - _uid=0100007FECFB6A6A889867AE02CD1403 - 302 BYPASS  - - [30/Jul/2026:07:23:34 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "112.208.172.11, 112.208.172.11, 112.208.172.11, 112.208.172.11"
112.208.172.11 - _uid=0100007FECFB6A6A889867AE02CD1403 - 302 BYPASS  - - [30/Jul/2026:07:23:36 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "112.208.172.11, 112.208.172.11, 112.208.172.11, 112.208.172.11"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:39:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785397139.6096689701080322265625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:48:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785397725.7194590568542480468750 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
31.220.45.74 - - - 401 BYPASS  - 9cd0ce4e35fa [30/Jul/2026:07:48:46 +0000] "GET /wp-json/wp/v2/users/me?context=edit HTTP/1.1"  748 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74"
31.220.45.74 - _uid=0100007F71A36A6A889867AE02730603 - 401 BYPASS  - 9cd0ce4e35fa [30/Jul/2026:07:48:47 +0000] "GET /wp-json/wp/v2/users/me?context=edit HTTP/1.1"  660 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74, 31.220.45.74, 31.220.45.74, 31.220.45.74"
31.220.45.74 - _uid=0100007F71A36A6A889867AE02730603 - 401 MISS  - 9cd0ce4e35fa [30/Jul/2026:07:48:48 +0000] "GET /?rest_route=/wp/v2/users/me&context=edit HTTP/1.1"  647 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74, 31.220.45.74, 31.220.45.74, 31.220.45.74"
37.27.122.165 - _uid=0100007F71A36A6A889867AE02730603 - 200 BYPASS  - - [30/Jul/2026:07:48:49 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
31.220.45.74 - _uid=0100007F71A36A6A889867AE02730603 - 302 BYPASS  - - [30/Jul/2026:07:48:49 +0000] "GET /wp-admin/ HTTP/1.1"  512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74, 31.220.45.74, 31.220.45.74, 31.220.45.74"
31.220.45.74 - _uid=0100007F71A36A6A889867AE02730603 - 404 BYPASS  - - [30/Jul/2026:07:48:50 +0000] "GET /wp/wp-login.php HTTP/1.1"  299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74, 31.220.45.74, 31.220.45.74, 31.220.45.74"
31.220.45.74 - _uid=0100007F71A36A6A889867AE02730603 - 404 BYPASS  - - [30/Jul/2026:07:48:50 +0000] "GET /wordpress/wp-login.php HTTP/1.1"  299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74, 31.220.45.74, 31.220.45.74, 31.220.45.74"
31.220.45.74 - _uid=0100007F71A36A6A889867AE02730603 - 404 BYPASS  - - [30/Jul/2026:07:48:51 +0000] "GET /blog/wp-login.php HTTP/1.1"  299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "31.220.45.74, 31.220.45.74, 31.220.45.74, 31.220.45.74"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:51:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785397895.9693510532379150390625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
45.227.254.5 - - - 200 BYPASS  - - [30/Jul/2026:07:51:36 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "45.227.254.5, 45.227.254.5, 45.227.254.5, 45.227.254.5"
45.227.254.5 - - - 444 BYPASS  - - [30/Jul/2026:07:51:37 +0000] "POST /xmlrpc.php HTTP/1.1"  0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0 Safari/605.1.15" "45.227.254.5, 45.227.254.5, 45.227.254.5, 45.227.254.5"
77.77.20.158 - - - 403 BYPASS  - - [30/Jul/2026:07:51:41 +0000] "POST /xmlrpc.php HTTP/1.1"  467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "77.77.20.158, 77.77.20.158, 77.77.20.158, 77.77.20.158"
89.209.197.118 - - - 200 BYPASS  - - [30/Jul/2026:07:51:46 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:133.0) Gecko/20100101 Firefox/133.0" "89.209.197.118, 89.209.197.118, 89.209.197.118, 89.209.197.118"
171.7.97.67 - - - 200 BYPASS  - - [30/Jul/2026:07:51:54 +0000] "GET /wp-login.php?wp_lang=en_US HTTP/1.1"  6521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "171.7.97.67"
171.7.97.67 - _uid=0100007F9A026B6A869867AE02335D03 - 302 BYPASS  - - [30/Jul/2026:07:51:56 +0000] "POST /wp-login.php?wp_lang=en_US HTTP/1.1"  1503 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "171.7.97.67"
171.7.97.67 - _uid=0100007F9A026B6A869867AE02335D03 - 200 BYPASS  - - [30/Jul/2026:07:51:57 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1"  4131 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?wp_lang=en_US" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "171.7.97.67"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:52:00 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
27.49.70.14 - - - 302 BYPASS  - - [30/Jul/2026:07:52:00 +0000] "GET /wp-admin/ HTTP/1.1"  600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "27.49.70.14, 27.49.70.14, 27.49.70.14, 27.49.70.14"
171.7.97.67 - _uid=0100007F9A026B6A869867AE02335D03 - 200 BYPASS  - - [30/Jul/2026:07:52:01 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1"  8452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "171.7.97.67"
27.49.70.14 - _uid=0100007FA0026B6A869867AE02365D03 - 302 BYPASS  - - [30/Jul/2026:07:52:03 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "27.49.70.14, 27.49.70.14, 27.49.70.14, 27.49.70.14"
171.7.97.67 - _uid=0100007F9A026B6A869867AE02335D03 - 200 BYPASS  - - [30/Jul/2026:07:52:04 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fplugin-install.php&reauth=1 HTTP/1.1"  8470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "171.7.97.67"
27.49.70.14 - _uid=0100007FA0026B6A869867AE02365D03 - 302 BYPASS  - - [30/Jul/2026:07:52:05 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "27.49.70.14, 27.49.70.14, 27.49.70.14, 27.49.70.14"
171.7.97.67 - _uid=0100007F9A026B6A869867AE02335D03 - 200 BYPASS  - - [30/Jul/2026:07:52:07 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fplugin-install.php&reauth=1 HTTP/1.1"  8470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "171.7.97.67"
27.49.70.14 - _uid=0100007FA0026B6A869867AE02365D03 - 302 BYPASS  - - [30/Jul/2026:07:52:08 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "27.49.70.14, 27.49.70.14, 27.49.70.14, 27.49.70.14"
27.49.70.14 - _uid=0100007FA0026B6A869867AE02365D03 - 302 BYPASS  - - [30/Jul/2026:07:52:10 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "27.49.70.14, 27.49.70.14, 27.49.70.14, 27.49.70.14"
27.49.70.14 - _uid=0100007FA0026B6A869867AE02365D03 - 302 BYPASS  - - [30/Jul/2026:07:52:12 +0000] "GET /wp-admin/plugin-install.php HTTP/1.1"  530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "27.49.70.14, 27.49.70.14, 27.49.70.14, 27.49.70.14"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:07:56:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785398173.3117890357971191406250 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
46.175.244.66 - - - 200 BYPASS  - - [30/Jul/2026:07:56:13 +0000] "GET /wp-json/ HTTP/1.1"  21483 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 401 BYPASS  - 9cd0ce4e35fa [30/Jul/2026:07:56:16 +0000] "GET /wp-json/wp/v2/users/me HTTP/1.1"  660 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 200 BYPASS  - - [30/Jul/2026:07:56:18 +0000] "GET /wp-login.php HTTP/1.1"  2471 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - - - 302 BYPASS  - - [30/Jul/2026:07:56:23 +0000] "POST /wp-login.php HTTP/1.1"  1552 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66"
37.27.122.165 - _uid=0100007F9D036B6A869867AE02595E03 - 200 BYPASS  - - [30/Jul/2026:07:56:26 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=88b2d9ed0f HTTP/1.1"  153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 400 BYPASS  - - [30/Jul/2026:07:56:26 +0000] "GET /wp-admin/admin-ajax.php?action=rest-nonce HTTP/1.1"  517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 400 BYPASS  - - [30/Jul/2026:07:56:29 +0000] "GET /wp-admin/admin-ajax.php?action=rest_nonce HTTP/1.1"  517 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 302 BYPASS  - - [30/Jul/2026:07:56:30 +0000] "GET /wp-admin/ HTTP/1.1"  512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007FA7036B6A869867AE02655E03 - 200 BYPASS  - - [30/Jul/2026:07:56:32 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1"  8452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 403 BYPASS  - - [30/Jul/2026:07:56:36 +0000] "GET /wp-json/wp/v2/users/me?context=edit&_fields=id%2Croles%2Ccapabilities HTTP/1.1"  809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 403 BYPASS  - - [30/Jul/2026:07:56:37 +0000] "GET /xmlrpc.php HTTP/1.1"  297 "-" "WP-Extra/1.2" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 200 BYPASS  - - [30/Jul/2026:07:56:38 +0000] "GET /wp-json/ HTTP/1.1"  21395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 403 BYPASS  - - [30/Jul/2026:07:56:40 +0000] "POST /xmlrpc.php HTTP/1.1"  297 "-" "WP-Extra/1.2" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 200 BYPASS  - - [30/Jul/2026:07:56:41 +0000] "OPTIONS /wp-json/batch/v1 HTTP/1.1"  951 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 401 BYPASS  - - [30/Jul/2026:07:56:43 +0000] "GET /wp-json/wp-site-health/v1/tests/https-status HTTP/1.1"  650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 403 BYPASS  - - [30/Jul/2026:07:56:47 +0000] "POST /wp-json/wp/v2/users/1/application-passwords HTTP/1.1"  784 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 403 BYPASS  - - [30/Jul/2026:07:56:47 +0000] "GET /wp-json/wp/v2/users?search=bot&context=edit HTTP/1.1"  809 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 302 BYPASS  - - [30/Jul/2026:07:56:49 +0000] "GET /wp-admin/user-new.php HTTP/1.1"  524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007FA7036B6A869867AE02655E03 - 200 BYPASS  - - [30/Jul/2026:07:56:51 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fuser-new.php&reauth=1 HTTP/1.1"  8464 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 401 BYPASS  - - [30/Jul/2026:07:56:52 +0000] "GET /wp-json/wp-site-health/v1/tests/https-status HTTP/1.1"  650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 401 BYPASS  - - [30/Jul/2026:07:56:55 +0000] "GET /wp-json/wp-site-health/v1/tests/background-updates HTTP/1.1"  650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
46.175.244.66 - _uid=0100007F9D036B6A869867AE02595E03 - 401 BYPASS  - - [30/Jul/2026:07:56:58 +0000] "GET /wp-json/wp-site-health/v1/tests/loopback-requests HTTP/1.1"  650 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" "46.175.244.66, 46.175.244.66, 46.175.244.66, 46.175.244.66"
51.103.154.47 - - - 403 BYPASS  - - [30/Jul/2026:08:02:54 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"  385 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - - - 404 MISS  - - [30/Jul/2026:08:02:59 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1"  433 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F34576A6A92F06720027F4E03 - 404 MISS  - - [30/Jul/2026:08:03:10 +0000] "GET //aa.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - - - 403 BYPASS  - - [30/Jul/2026:08:03:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1"  385 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F33056B6A869867AE029B5F03 - 404 MISS  - - [30/Jul/2026:08:03:24 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:26 +0000] "GET /media.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:29 +0000] "GET /images.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:34 +0000] "GET /gecko.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:36 +0000] "GET /82.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:37 +0000] "GET /xstelth.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:39 +0000] "GET /xp.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:42 +0000] "GET ///admin.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:43 +0000] "GET /adminner.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:44 +0000] "GET //a.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F091B6A6A8BF0B71F02B59E03 - 404 MISS  - - [30/Jul/2026:08:03:45 +0000] "GET /k.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F06976A6A869867AE02830603 - 404 MISS  - - [30/Jul/2026:08:03:47 +0000] "GET /aaa.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC5B16A6A869867AE026D2603 - 404 MISS  - - [30/Jul/2026:08:03:49 +0000] "GET /222.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025E0A03 - 404 MISS  - - [30/Jul/2026:08:03:51 +0000] "GET /test.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025E0A03 - 404 MISS  - - [30/Jul/2026:08:03:53 +0000] "GET /11.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025E0A03 - 404 MISS  - - [30/Jul/2026:08:03:54 +0000] "GET /mac.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:03:56 +0000] "GET /wp-content/uploads/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:03:58 +0000] "GET /wp-includes/Text/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:00 +0000] "GET /dr.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:02 +0000] "GET /ops.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:03 +0000] "GET //wp-includes/assets/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:04 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:05 +0000] "GET /.well-known/about.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:07 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:10 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 BYPASS  - - [30/Jul/2026:08:04:12 +0000] "GET /wp-admin/css/colour.php HTTP/1.1"  299 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:14 +0000] "GET /8.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:16 +0000] "GET /wp-content/admin.php HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:18 +0000] "GET //f6.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:21 +0000] "GET /wp-content/themes/index.php HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:25 +0000] "GET /wp-blog.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:26 +0000] "GET //cgi-bin/index.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:28 +0000] "GET //wp-includes/l10n/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 403 BYPASS  - - [30/Jul/2026:08:04:29 +0000] "GET /wp-content/uploads/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:31 +0000] "GET /f35.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:08:04:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785398673.9775979518890380859375 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 200 MISS  - - [30/Jul/2026:08:04:34 +0000] "GET /wp-load.php HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:36 +0000] "GET /xyn.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:04:38 +0000] "GET /xstelth.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:39 +0000] "GET /ccc.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:04:40 +0000] "GET /xp.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:41 +0000] "GET /FWAZ.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:44 +0000] "GET /file.php? HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC7B16A6A869867AE02762603 - 404 MISS  - - [30/Jul/2026:08:04:46 +0000] "GET /file.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBCB16A6A889867AE02520A03 - 404 MISS  - - [30/Jul/2026:08:04:47 +0000] "GET /ss.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBCB16A6A889867AE02520A03 - 404 MISS  - - [30/Jul/2026:08:04:48 +0000] "GET /biufile.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBCB16A6A889867AE02520A03 - 404 MISS  - - [30/Jul/2026:08:04:50 +0000] "GET /coffexium.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBCB16A6A889867AE02520A03 - 404 MISS  - - [30/Jul/2026:08:04:52 +0000] "GET /als.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:04:53 +0000] "GET /wp-content/uploads/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:04:55 +0000] "GET /wp-includes/Text/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBCB16A6A889867AE02520A03 - 404 MISS  - - [30/Jul/2026:08:04:58 +0000] "GET /simple.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:02 +0000] "GET //wp-includes/assets/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:04 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:07 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBEB16A6A869867AE02592603 - 404 MISS  - - [30/Jul/2026:08:05:08 +0000] "GET /fpwch.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:08 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 BYPASS  - - [30/Jul/2026:08:05:10 +0000] "GET /wp-admin/css/colour.php HTTP/1.1"  299 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:13 +0000] "GET /wp-content/admin.php HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:20 +0000] "GET //f6.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBEB16A6A869867AE02592603 - 404 MISS  - - [30/Jul/2026:08:05:22 +0000] "GET /info.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:23 +0000] "GET /wp-content/themes/index.php HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:26 +0000] "GET /wp-blog.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:28 +0000] "GET //cgi-bin/index.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:31 +0000] "GET //wp-includes/l10n/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 403 BYPASS  - - [30/Jul/2026:08:05:34 +0000] "GET /wp-content/uploads/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:38 +0000] "GET /f35.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 200 HIT  - - [30/Jul/2026:08:05:45 +0000] "GET /wp-load.php HTTP/1.1"  296 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:51 +0000] "GET /xyn.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02580A03 - 404 MISS  - - [30/Jul/2026:08:05:53 +0000] "GET /dex.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:54 +0000] "GET /ccc.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:05:58 +0000] "GET /FWAZ.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:01 +0000] "GET /file.php? HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:03 +0000] "GET /file.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:04 +0000] "GET /ss.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:06 +0000] "GET /biufile.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:09 +0000] "GET /coffexium.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:10 +0000] "GET /als.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:12 +0000] "GET /simple.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 HIT  - - [30/Jul/2026:08:06:14 +0000] "GET /fpwch.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 MISS  - - [30/Jul/2026:08:06:18 +0000] "GET /11.php?p= HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F081B6A6A8BF0B71F02B49E03 - 404 MISS  - - [30/Jul/2026:08:06:21 +0000] "GET /1.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 403 BYPASS  - - [30/Jul/2026:08:06:23 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:25 +0000] "GET /config.json.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:27 +0000] "GET /k2.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:30 +0000] "GET /for.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:32 +0000] "GET /raw.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:34 +0000] "GET //wp.php? HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:36 +0000] "GET /002.php?p= HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:06:48 +0000] "GET /fffm.php?p= HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:07:02 +0000] "GET //johen.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02580A03 - 403 BYPASS  - - [30/Jul/2026:08:07:14 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 MISS  - - [30/Jul/2026:08:07:15 +0000] "GET /nwflm.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02580A03 - 404 MISS  - - [30/Jul/2026:08:07:25 +0000] "GET /111.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02580A03 - 403 BYPASS  - - [30/Jul/2026:08:07:26 +0000] "GET //wp-includes/Requests/ HTTP/1.1"  297 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02580A03 - 404 MISS  - - [30/Jul/2026:08:07:28 +0000] "GET /ws.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F631E6A6A92F06720027A4603 - 404 MISS  - - [30/Jul/2026:08:07:29 +0000] "GET ///coffee.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F631E6A6A92F06720027A4603 - 404 MISS  - - [30/Jul/2026:08:07:31 +0000] "GET /goods.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02570A03 - 404 MISS  - - [30/Jul/2026:08:07:32 +0000] "GET /about.php? HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02570A03 - 404 MISS  - - [30/Jul/2026:08:07:34 +0000] "GET /about.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBDB16A6A889867AE02560A03 - 404 MISS  - - [30/Jul/2026:08:07:36 +0000] "GET /admin.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBBB16A6A869867AE02552603 - 404 MISS  - - [30/Jul/2026:08:07:38 +0000] "GET //themes.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBBB16A6A869867AE02552603 - 404 MISS  - - [30/Jul/2026:08:07:39 +0000] "GET /wefile.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBBB16A6A869867AE02552603 - 404 MISS  - - [30/Jul/2026:08:07:39 +0000] "GET /inputs.php? HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FBBB16A6A869867AE02552603 - 404 MISS  - - [30/Jul/2026:08:07:40 +0000] "GET /inputs.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC2B16A6A869867AE02622603 - 404 MISS  - - [30/Jul/2026:08:07:41 +0000] "GET //adminfuns.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC2B16A6A869867AE02622603 - 404 MISS  - - [30/Jul/2026:08:07:42 +0000] "GET /ssixta.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC2B16A6A869867AE02622603 - 404 MISS  - - [30/Jul/2026:08:07:44 +0000] "GET /hypo.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC2B16A6A869867AE02622603 - 404 MISS  - - [30/Jul/2026:08:07:47 +0000] "GET /404.php?p= HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FFBD5696A8BF0B71F02E17303 - 404 MISS  - - [30/Jul/2026:08:07:49 +0000] "GET /reviall.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FFBD5696A8BF0B71F02E17303 - 404 MISS  - - [30/Jul/2026:08:07:50 +0000] "GET /xxx.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007F601E6A6A92F0672002734603 - 404 MISS  - - [30/Jul/2026:08:07:52 +0000] "GET /yj09.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0D5696A8BF0B71F02957303 - 404 MISS  - - [30/Jul/2026:08:07:54 +0000] "GET /alfa.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A869867AE025D2603 - 404 MISS  - - [30/Jul/2026:08:07:58 +0000] "GET /xa.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A869867AE025D2603 - 404 MISS  - - [30/Jul/2026:08:08:00 +0000] "GET //av.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A869867AE025D2603 - 404 MISS  - - [30/Jul/2026:08:08:03 +0000] "GET /bthil.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:07 +0000] "GET /geforce.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:09 +0000] "GET /classwithtostring.php?p= HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:11 +0000] "GET /mlqeheok.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:14 +0000] "GET /sh3ll.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:19 +0000] "GET /pbck.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:20 +0000] "GET ///s_w.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:22 +0000] "GET ///s_p.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:24 +0000] "GET ///s_y.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:26 +0000] "GET ///2larp.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:28 +0000] "GET ///term.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:30 +0000] "GET /000.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:33 +0000] "GET ///Jcrop.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:35 +0000] "GET /234ff.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:38 +0000] "GET /Zoo.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:40 +0000] "GET ///133.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:44 +0000] "GET /alls.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:46 +0000] "GET /wp-ws68.php?p= HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:49 +0000] "GET /w3lls.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:51 +0000] "GET /mgrr.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FF9966A6A889867AE02B30303 - 404 MISS  - - [30/Jul/2026:08:08:54 +0000] "GET /pucci.php HTTP/1.1"  345 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:00 +0000] "GET /alfa.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:01 +0000] "GET /xa.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:05 +0000] "GET //av.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:08 +0000] "GET /bthil.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:10 +0000] "GET /geforce.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:12 +0000] "GET /classwithtostring.php?p= HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:13 +0000] "GET /mlqeheok.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:16 +0000] "GET /sh3ll.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:21 +0000] "GET ///s_w.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:25 +0000] "GET ///s_p.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:30 +0000] "GET ///s_y.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:32 +0000] "GET ///2larp.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:34 +0000] "GET ///term.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:36 +0000] "GET /000.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:39 +0000] "GET ///Jcrop.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:40 +0000] "GET /234ff.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:42 +0000] "GET /Zoo.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:43 +0000] "GET ///133.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:45 +0000] "GET /alls.php HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
51.103.154.47 - _uid=0100007FC0B16A6A889867AE025D0A03 - 404 HIT  - - [30/Jul/2026:08:09:47 +0000] "GET /wp-ws68.php?p= HTTP/1.1"  344 "-" "-" "51.103.154.47, 51.103.154.47, 51.103.154.47, 51.103.154.47"
253.108.96.139 - - - 200 BYPASS  - - [30/Jul/2026:08:16:49 +0000] "GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1"  40556 "https://redlightpain.us7.cdn-alpha.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1742334746" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" "253.108.96.139"
173.194.92.191 - _uid=0100007F71A36A6A889867AE02730603 - 404 BYPASS  - - [30/Jul/2026:08:16:50 +0000] "GET /favicon.ico HTTP/1.1"  381 "https://redlightpain.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" "173.194.92.191, 173.194.92.191, 173.194.92.191, 173.194.92.191"
37.27.122.165 - - - 200 BYPASS  - - [30/Jul/2026:08:59:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785401967.4463770389556884765625 HTTP/1.1"  241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165"
94.154.43.179 - - - 404 MISS  - - [30/Jul/2026:08:59:28 +0000] "GET /.env HTTP/1.1"  29876 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "94.154.43.179, 94.154.43.179, 94.154.43.179, 94.154.43.179"
62.193.192.129 - - - 200 BYPASS  - - [30/Jul/2026:08:59:48 +0000] "GET /wp-login.php HTTP/1.1"  2559 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "62.193.192.129, 62.193.192.129, 62.193.192.129, 62.193.192.129"
62.193.192.129 - - - 200 BYPASS  - - [30/Jul/2026:08:59:54 +0000] "POST /wp-login.php HTTP/1.1"  6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "62.193.192.129"

文件操作 - redlightpain.log

文件: /storage/v12552/redlightpain/logs/redlightpain.log

编辑文件内容

修改文件时间

删除文件