文件操作 - redlightpain.log.1
返回文件管理
返回主菜单
删除本文件
文件: /storage/v12552/redlightpain/logs/redlightpain.log.1
编辑文件内容
37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:11:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785283869.7568240165710449218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:00:11:10 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:00:11:13 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117" 43.228.157.148 - - - 404 BYPASS - - [29/Jul/2026:00:11:15 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:15 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:15 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:15 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 MISS - - [29/Jul/2026:00:11:15 +0000] "GET /djqeguvk.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 403 BYPASS - - [29/Jul/2026:00:11:15 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 MISS - - [29/Jul/2026:00:11:15 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 BYPASS - - [29/Jul/2026:00:11:19 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 7207 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 MISS - - [29/Jul/2026:00:11:19 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 7205 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 MISS - - [29/Jul/2026:00:11:20 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 7205 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 43.228.157.148 - - - 404 BYPASS - - [29/Jul/2026:00:11:22 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 7196 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.148, 43.228.157.148, 43.228.157.148, 43.228.157.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:34:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785285267.8046810626983642578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:00:34:28 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:00:34:30 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:38:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785285500.1290531158447265625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 34.139.68.156 - - - 404 MISS - - [29/Jul/2026:00:38:20 +0000] "GET /old/ HTTP/1.1" 29876 "http://redlightpain.com/old/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" "34.139.68.156, 34.139.68.156, 34.139.68.156, 34.139.68.156" 34.139.68.156 - - - 404 MISS - - [29/Jul/2026:00:38:21 +0000] "GET /backup/ HTTP/1.1" 29876 "http://redlightpain.com/backup/" "Mozilla/5.0 (Linux; Android 13; Infinix X688B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.48 Mobile Safari/537.36" "34.139.68.156, 34.139.68.156, 34.139.68.156, 34.139.68.156" 34.139.68.156 - - - 404 MISS - - [29/Jul/2026:00:38:22 +0000] "GET /wordpress/ HTTP/1.1" 29876 "http://redlightpain.com/wordpress/" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" "34.139.68.156, 34.139.68.156, 34.139.68.156, 34.139.68.156" 34.139.68.156 - - - 404 MISS - - [29/Jul/2026:00:38:24 +0000] "GET /wp/ HTTP/1.1" 29876 "http://redlightpain.com/wp/" "Mozilla/5.0 (Linux; Android 14; Xiaomi 14 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.33 Mobile Safari/537.36" "34.139.68.156, 34.139.68.156, 34.139.68.156, 34.139.68.156" 34.139.68.156 - - - 404 MISS - - [29/Jul/2026:00:38:25 +0000] "GET /blog/ HTTP/1.1" 29876 "http://redlightpain.com/blog/" "Mozilla/5.0 (Linux; Android 14; OnePlus 12) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.102 Mobile Safari/537.36" "34.139.68.156, 34.139.68.156, 34.139.68.156, 34.139.68.156" 34.139.68.156 - - - 404 MISS - - [29/Jul/2026:00:38:27 +0000] "GET /new/ HTTP/1.1" 29876 "http://redlightpain.com/new/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" "34.139.68.156, 34.139.68.156, 34.139.68.156, 34.139.68.156" 104.234.140.100 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.100, 104.234.140.100, 104.234.140.100, 104.234.140.100" 104.234.140.103 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.103, 104.234.140.103, 104.234.140.103, 104.234.140.103" 104.234.140.114 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.114, 104.234.140.114, 104.234.140.114, 104.234.140.114" 104.234.140.94 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.94, 104.234.140.94, 104.234.140.94, 104.234.140.94" 104.234.140.100 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.100, 104.234.140.100, 104.234.140.100, 104.234.140.100" 104.234.140.96 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.96, 104.234.140.96, 104.234.140.96, 104.234.140.96" 104.234.140.114 - - - 403 BYPASS - - [29/Jul/2026:00:39:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.114, 104.234.140.114, 104.234.140.114, 104.234.140.114" 104.234.140.108 - - - 403 BYPASS - - [29/Jul/2026:00:39:09 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.108, 104.234.140.108, 104.234.140.108, 104.234.140.108" 195.3.220.7 - - - 404 HIT - - [29/Jul/2026:00:42:27 +0000] "GET /a.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 HIT - - [29/Jul/2026:00:42:28 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 HIT - - [29/Jul/2026:00:42:28 +0000] "GET /simple.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 MISS - - [29/Jul/2026:00:42:28 +0000] "GET /.tmb/worksec.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:29 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:29 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:30 +0000] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:31 +0000] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 MISS - - [29/Jul/2026:00:42:32 +0000] "GET /worksec.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:32 +0000] "GET /wp-content/worksec.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:33 +0000] "GET /wp-content/themes/twentynineteen/404.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:34 +0000] "GET /wp-content/themes/twentytwentyone/404.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:35 +0000] "GET /wp-content/cache/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:35 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:36 +0000] "GET /wp-content/languages/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:37 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:37 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:38 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:38 +0000] "GET /wp-content/uploads/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:42:41 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=16c27656be HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:42:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785285761.7960441112518310546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 195.3.220.7 - - - 302 BYPASS - - [29/Jul/2026:00:42:42 +0000] "GET /wp-admin/index.php HTTP/1.1" 609 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 200 BYPASS - - [29/Jul/2026:00:42:44 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 8522 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:45 +0000] "GET /wp-content/themes/Divi/404.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 302 BYPASS - - [29/Jul/2026:00:42:46 +0000] "GET /wp-admin/index.php HTTP/1.1" 609 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 200 BYPASS - - [29/Jul/2026:00:42:48 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Findex.php&reauth=1 HTTP/1.1" 8522 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7" 195.3.220.7 - - - 404 BYPASS - - [29/Jul/2026:00:42:49 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 BYPASS - - [29/Jul/2026:00:42:50 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 403 BYPASS - - [29/Jul/2026:00:42:50 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 BYPASS - - [29/Jul/2026:00:42:51 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 404 BYPASS - - [29/Jul/2026:00:42:52 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 302 BYPASS - - [29/Jul/2026:00:42:53 +0000] "GET /wp-admin/network/index.php HTTP/1.1" 619 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 200 BYPASS - - [29/Jul/2026:00:42:55 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fnetwork%2Findex.php&reauth=1 HTTP/1.1" 8530 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7" 195.3.220.7 - - - 302 BYPASS - - [29/Jul/2026:00:42:57 +0000] "GET /wp-admin/user/index.php HTTP/1.1" 616 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7, 195.3.220.7, 195.3.220.7, 195.3.220.7" 195.3.220.7 - - - 200 BYPASS - - [29/Jul/2026:00:42:58 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fuser%2Findex.php&reauth=1 HTTP/1.1" 8527 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" "195.3.220.7" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:00:48:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785286116.1740589141845703125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 170.106.35.153 - - - 200 MISS - - [29/Jul/2026:00:48:36 +0000] "GET /x-6/ HTTP/1.1" 33455 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "170.106.35.153" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:00:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785286815.9974050521850585937500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 185.188.249.121 - - - 200 BYPASS - - [29/Jul/2026:01:00:16 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.188.249.121, 185.188.249.121, 185.188.249.121, 185.188.249.121" 185.188.249.121 - - - 200 BYPASS - - [29/Jul/2026:01:00:21 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.188.249.121" 74.248.20.32 - - - 403 BYPASS - - [29/Jul/2026:01:11:47 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:11:48 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FD140696A6022FC3A02B0FD03 - 404 MISS - - [29/Jul/2026:01:11:49 +0000] "GET /nothing2.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FD140696A6022FC3A02B0FD03 - 404 MISS - - [29/Jul/2026:01:11:52 +0000] "GET /wkl.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FD140696A6022FC3A02B0FD03 - 404 MISS - - [29/Jul/2026:01:11:55 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FD140696A6022FC3A02B0FD03 - 404 MISS - - [29/Jul/2026:01:11:56 +0000] "GET /error.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:11:57 +0000] "GET /wpo.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:11:59 +0000] "GET /shellalfa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:00 +0000] "GET /simple.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F744C696A3843B74702E81103 - 404 MISS - - [29/Jul/2026:01:12:00 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F744C696A3843B74702E81103 - 404 BYPASS - - [29/Jul/2026:01:12:01 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 299 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F744C696A3843B74702E81103 - 404 MISS - - [29/Jul/2026:01:12:01 +0000] "GET /n.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F744C696A3843B74702E81103 - 404 MISS - - [29/Jul/2026:01:12:02 +0000] "GET /s.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FCB15696A6022FC3A0272D703 - 404 MISS - - [29/Jul/2026:01:12:03 +0000] "GET /cong.php?p= HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FCB15696A6022FC3A0272D703 - 404 MISS - - [29/Jul/2026:01:12:04 +0000] "GET /wp-includes/fonts/about.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FCB15696A6022FC3A0272D703 - 404 MISS - - [29/Jul/2026:01:12:04 +0000] "GET /css.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F4E3B696A6022FC3A022AF503 - 404 MISS - - [29/Jul/2026:01:12:05 +0000] "GET /lv.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FCE98686A6022FC3A02AF7303 - 404 MISS - - [29/Jul/2026:01:12:05 +0000] "GET /ee.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FD598686A6022FC3A02C47303 - 404 MISS - - [29/Jul/2026:01:12:06 +0000] "GET /6.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FD598686A6022FC3A02C47303 - 404 MISS - - [29/Jul/2026:01:12:06 +0000] "GET /system_log.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F683B696A6022FC3A0293F503 - 404 MISS - - [29/Jul/2026:01:12:07 +0000] "GET /ab.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:12:07 +0000] "GET /lock360.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F643B696A6022FC3A0278F503 - 404 MISS - - [29/Jul/2026:01:12:08 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F643B696A6022FC3A0278F503 - 404 MISS - - [29/Jul/2026:01:12:09 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F643B696A6022FC3A0278F503 - 404 MISS - - [29/Jul/2026:01:12:10 +0000] "GET /abcd.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F083E696A6022FC3A021BF903 - 404 MISS - - [29/Jul/2026:01:12:11 +0000] "GET /gifclass.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F6D3B696A5D222E3B02D23303 - 404 MISS - - [29/Jul/2026:01:12:12 +0000] "GET /enclas.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F6D3B696A5D222E3B02D23303 - 404 MISS - - [29/Jul/2026:01:12:13 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F6D3B696A5D222E3B02D23303 - 404 MISS - - [29/Jul/2026:01:12:14 +0000] "GET /we.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:12:15 +0000] "GET /fe5.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:12:16 +0000] "GET /tgrs.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:17 +0000] "GET /ut.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:19 +0000] "GET /a3.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:21 +0000] "GET /aa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F053E696A6022FC3A020DF903 - 404 MISS - - [29/Jul/2026:01:12:22 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FDD98686A6022FC3A02DD7303 - 404 MISS - - [29/Jul/2026:01:12:23 +0000] "GET /3.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F2D01696A6022FC3A022CC203 - 404 MISS - - [29/Jul/2026:01:12:24 +0000] "GET /f6.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F2D01696A6022FC3A022CC203 - 404 MISS - - [29/Jul/2026:01:12:26 +0000] "GET /fm.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F2B01696A6022FC3A0226C203 - 404 MISS - - [29/Jul/2026:01:12:28 +0000] "GET /rrr.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F2B01696A6022FC3A0226C203 - 404 MISS - - [29/Jul/2026:01:12:29 +0000] "GET /usep.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F2B01696A6022FC3A0226C203 - 404 MISS - - [29/Jul/2026:01:12:32 +0000] "GET /fm.php?p= HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F2B01696A6022FC3A0226C203 - 404 MISS - - [29/Jul/2026:01:12:33 +0000] "GET /0x.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F6019686A6022FC3A02182E03 - 404 MISS - - [29/Jul/2026:01:12:33 +0000] "GET /goat.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F6019686A6022FC3A02182E03 - 404 MISS - - [29/Jul/2026:01:12:34 +0000] "GET /123.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F653B696A6022FC3A027AF503 - 404 MISS - - [29/Jul/2026:01:12:35 +0000] "GET /ioxi-o.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FF83D696A6022FC3A02E4F803 - 404 MISS - - [29/Jul/2026:01:12:35 +0000] "GET /taktak.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:36 +0000] "GET /gt.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:37 +0000] "GET /aghbvr.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:38 +0000] "GET /miso.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:38 +0000] "GET /naxc.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:40 +0000] "GET /fex.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:41 +0000] "GET /taff.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:42 +0000] "GET /bless11.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:43 +0000] "GET /aj.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:01:12:44 +0000] "GET /opts.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:45 +0000] "GET /filer.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:46 +0000] "GET /en0.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:47 +0000] "GET /kaza.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:48 +0000] "GET /wsd.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:49 +0000] "GET /gifclass4.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:49 +0000] "GET /info.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:50 +0000] "GET /333.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:52 +0000] "GET /cfile.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:53 +0000] "GET /bless3.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:01:12:53 +0000] "GET /bless.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:54 +0000] "GET /doti.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:55 +0000] "GET /031.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:56 +0000] "GET /wfile.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:56 +0000] "GET /lala.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:57 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:57 +0000] "GET /he.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:58 +0000] "GET /plss3.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:12:59 +0000] "GET /ton.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:00 +0000] "GET /33.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:00 +0000] "GET /nfile.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 104.234.140.56 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.56, 104.234.140.56, 104.234.140.56, 104.234.140.56" 104.234.140.49 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.49, 104.234.140.49, 104.234.140.49, 104.234.140.49" 104.234.140.57 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.57, 104.234.140.57, 104.234.140.57, 104.234.140.57" 104.234.140.50 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.50, 104.234.140.50, 104.234.140.50, 104.234.140.50" 104.234.140.57 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.57, 104.234.140.57, 104.234.140.57, 104.234.140.57" 104.234.140.39 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.39, 104.234.140.39, 104.234.140.39, 104.234.140.39" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:01 +0000] "GET /ffile.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 104.234.140.54 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.54, 104.234.140.54, 104.234.140.54, 104.234.140.54" 104.234.140.34 - - - 403 BYPASS - - [29/Jul/2026:01:13:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.34, 104.234.140.34, 104.234.140.34, 104.234.140.34" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:02 +0000] "GET /file18.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:03 +0000] "GET /file21.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:03 +0000] "GET /yellow.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:04 +0000] "GET /file1.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:05 +0000] "GET /geck.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:06 +0000] "GET /file4.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:06 +0000] "GET /file88.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:07 +0000] "GET /7.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F123E696A6022FC3A0246F903 - 404 MISS - - [29/Jul/2026:01:13:07 +0000] "GET /size.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F3101696A6022FC3A0242C203 - 404 MISS - - [29/Jul/2026:01:13:08 +0000] "GET /bolt.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F063E696A6022FC3A0211F903 - 404 MISS - - [29/Jul/2026:01:13:09 +0000] "GET /file8.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F063E696A6022FC3A0211F903 - 404 MISS - - [29/Jul/2026:01:13:10 +0000] "GET /file2.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:11 +0000] "GET /vee.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:12 +0000] "GET /a2.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:12 +0000] "GET /xxa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:14 +0000] "GET /mlex.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:14 +0000] "GET /030.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:15 +0000] "GET /haa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:16 +0000] "GET /xsox.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:17 +0000] "GET /classgoto24.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:18 +0000] "GET /inde.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:18 +0000] "GET /akk.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:19 +0000] "GET /alpa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:20 +0000] "GET /finny.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F613B696A6022FC3A026BF503 - 404 MISS - - [29/Jul/2026:01:13:21 +0000] "GET /file15.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:13:22 +0000] "GET /0x0x.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:13:22 +0000] "GET /2clas.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:24 +0000] "GET /file9.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:25 +0000] "GET /aaa.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:25 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:26 +0000] "GET /wp-admin/js/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:27 +0000] "GET /wp-admin/css/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:27 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:28 +0000] "GET /pucci.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:29 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:29 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:30 +0000] "GET /100.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:32 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:33 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:35 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 403 BYPASS - - [29/Jul/2026:01:13:37 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:39 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:42 +0000] "GET /ilex.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:44 +0000] "GET /tor.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:45 +0000] "GET /klex.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:47 +0000] "GET /shell1.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:49 +0000] "GET /sec.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:51 +0000] "GET /filesss.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:53 +0000] "GET /ea.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:54 +0000] "GET /gi.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:01:13:54 +0000] "GET /10.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:13:56 +0000] "GET /11.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:13:57 +0000] "GET /12.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE898686A5D222E3B02AC1803 - 404 MISS - - [29/Jul/2026:01:13:58 +0000] "GET /13.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FCA98686A6022FC3A02A37303 - 404 MISS - - [29/Jul/2026:01:14:02 +0000] "GET /hi.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FCA98686A6022FC3A02A37303 - 404 MISS - - [29/Jul/2026:01:14:05 +0000] "GET /v.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FDC98686A6022FC3A02D97303 - 404 MISS - - [29/Jul/2026:01:14:07 +0000] "GET /ar.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FDC98686A6022FC3A02D97303 - 404 MISS - - [29/Jul/2026:01:14:08 +0000] "GET /chosen.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F744C696A3743AF4702BE0603 - 404 MISS - - [29/Jul/2026:01:14:10 +0000] "GET /155.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FFE3D696A6022FC3A02F8F803 - 404 MISS - - [29/Jul/2026:01:14:11 +0000] "GET /ppp.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FFE3D696A6022FC3A02F8F803 - 404 MISS - - [29/Jul/2026:01:14:12 +0000] "GET /201.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FFE3D696A6022FC3A02F8F803 - 404 MISS - - [29/Jul/2026:01:14:13 +0000] "GET /install.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5F3B696A6022FC3A0261F503 - 404 MISS - - [29/Jul/2026:01:14:14 +0000] "GET /max.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5F3B696A6022FC3A0261F503 - 404 MISS - - [29/Jul/2026:01:14:15 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007F5F3B696A6022FC3A0261F503 - 404 MISS - - [29/Jul/2026:01:14:16 +0000] "GET /bak.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE698686A6022FC3A02ED7303 - 404 MISS - - [29/Jul/2026:01:14:16 +0000] "GET /ini.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE898686A6022FC3A02F67303 - 404 MISS - - [29/Jul/2026:01:14:17 +0000] "GET /mail.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - - - 404 MISS - - [29/Jul/2026:01:14:17 +0000] "GET /dlu.php HTTP/1.1" 433 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:19 +0000] "GET /zde.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:19 +0000] "GET /ifm.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:20 +0000] "GET /redi.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:21 +0000] "GET /fns.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:21 +0000] "GET /pent.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:23 +0000] "GET /wsx.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:25 +0000] "GET /r79.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:26 +0000] "GET /mpxct.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:27 +0000] "GET /x3.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:28 +0000] "GET /wan.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:29 +0000] "GET /iov.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:31 +0000] "GET /RsR.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:33 +0000] "GET /ouh.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:34 +0000] "GET /133.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:35 +0000] "GET /x0.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:35 +0000] "GET /wsr2.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:37 +0000] "GET /hq.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:39 +0000] "GET /blox.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:40 +0000] "GET /ant.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:40 +0000] "GET /fso.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 403 BYPASS - - [29/Jul/2026:01:14:41 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 74.248.20.32 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:01:14:42 +0000] "GET /2P.php HTTP/1.1" 345 "-" "-" "74.248.20.32, 74.248.20.32, 74.248.20.32, 74.248.20.32" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:21:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785288088.1428370475769042968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 194.61.28.72 - - - 200 BYPASS - - [29/Jul/2026:01:21:28 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.61.28.72, 194.61.28.72, 194.61.28.72, 194.61.28.72" 247.91.231.144 - - - 200 BYPASS - - [29/Jul/2026:01:21:30 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "247.91.231.144" 247.91.231.144 - _uid=0100007F9A55696A3843B74702BB2103 - 200 BYPASS - - [29/Jul/2026:01:21:31 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "247.91.231.144" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:25:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785288300.2807080745697021484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 103.75.185.95 - - - 200 BYPASS - - [29/Jul/2026:01:25:00 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.75.185.95, 103.75.185.95, 103.75.185.95, 103.75.185.95" 103.75.185.95 - - - 200 BYPASS - - [29/Jul/2026:01:25:07 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.75.185.95" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:38:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785289098.7203180789947509765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 43.153.107.22 - - - 200 MISS - - [29/Jul/2026:01:38:19 +0000] "GET /x-5/ HTTP/1.1" 33455 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "43.153.107.22" 203.175.125.116 - - - 207 BYPASS - - [29/Jul/2026:01:39:10 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 644 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007FBE59696A8BF0B71F02AA0303 - 207 BYPASS - - [29/Jul/2026:01:39:12 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007FBE59696A8BF0B71F02AA0303 - 207 BYPASS - - [29/Jul/2026:01:39:15 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007FBE59696A8BF0B71F02AA0303 - 207 BYPASS - - [29/Jul/2026:01:39:17 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:39:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785289159.7628579139709472656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 203.175.125.116 - _uid=0100007FBE59696A8BF0B71F02AA0303 - 207 BYPASS - - [29/Jul/2026:01:39:20 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25096 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007FBE59696A8BF0B71F02AA0303 - 207 BYPASS - - [29/Jul/2026:01:39:22 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25284 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007FBE59696A8BF0B71F02AA0303 - 207 BYPASS - - [29/Jul/2026:01:39:24 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007F024C686A6022FC3A027E5503 - 207 BYPASS - - [29/Jul/2026:01:39:27 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 5971 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007F024C686A6022FC3A027E5503 - 207 BYPASS - - [29/Jul/2026:01:39:29 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007F024C686A6022FC3A027E5503 - 207 BYPASS - - [29/Jul/2026:01:39:31 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007F024C686A6022FC3A027E5503 - 207 BYPASS - - [29/Jul/2026:01:39:33 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 25280 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 203.175.125.116 - _uid=0100007F024C686A6022FC3A027E5503 - 207 BYPASS - - [29/Jul/2026:01:39:35 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 4915 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "203.175.125.116, 203.175.125.116, 203.175.125.116, 203.175.125.116" 104.234.140.41 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.41, 104.234.140.41, 104.234.140.41, 104.234.140.41" 104.234.140.36 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.36, 104.234.140.36, 104.234.140.36, 104.234.140.36" 104.234.140.40 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.40, 104.234.140.40, 104.234.140.40, 104.234.140.40" 104.234.140.38 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.38, 104.234.140.38, 104.234.140.38, 104.234.140.38" 104.234.140.48 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.48, 104.234.140.48, 104.234.140.48, 104.234.140.48" 104.234.140.56 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.56, 104.234.140.56, 104.234.140.56, 104.234.140.56" 104.234.140.47 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.47, 104.234.140.47, 104.234.140.47, 104.234.140.47" 104.234.140.50 - - - 403 BYPASS - - [29/Jul/2026:01:47:24 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "104.234.140.50, 104.234.140.50, 104.234.140.50, 104.234.140.50" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:51:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785289888.8553540706634521484375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 69.163.176.25 - - - 200 BYPASS - - [29/Jul/2026:01:51:29 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.163.176.25, 69.163.176.25, 69.163.176.25, 69.163.176.25" 69.163.176.25 - - - 200 BYPASS - - [29/Jul/2026:01:51:31 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.163.176.25" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:01:55:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785290122.8483319282531738281250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 206.189.9.239 - - - 200 MISS - - [29/Jul/2026:01:55:23 +0000] "GET / HTTP/1.1" 7288 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" "206.189.9.239, 206.189.9.239, 206.189.9.239, 206.189.9.239" 206.189.9.239 - - - 404 BYPASS - - [29/Jul/2026:01:55:26 +0000] "GET /favicon.ico HTTP/1.1" 385 "https://redlightpain.com/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" "206.189.9.239, 206.189.9.239, 206.189.9.239, 206.189.9.239" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:10 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:10 +0000] "GET /edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:10 +0000] "GET /w.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:11 +0000] "GET /file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:11 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:11 +0000] "GET /aa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:11 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:12 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:12 +0000] "GET /goods.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:12 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:12 +0000] "GET /info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:12 +0000] "GET /chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:13 +0000] "GET /simple.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:13 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:13 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 301 BYPASS - - [29/Jul/2026:02:12:13 +0000] "GET /wp-admin HTTP/1.1" 486 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:14 +0000] "GET /wp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:14 +0000] "GET /file2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:14 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:15 +0000] "GET /alfa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:15 +0000] "GET /1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:16 +0000] "GET /222.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:16 +0000] "GET /asasx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:16 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:16 +0000] "GET /themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 403 BYPASS - - [29/Jul/2026:02:12:17 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:17 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:17 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:18 +0000] "GET /inputs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:18 +0000] "GET /100.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:18 +0000] "GET /akc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:18 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:18 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:19 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:19 +0000] "GET /index/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:19 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:19 +0000] "GET /wp-blink.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:20 +0000] "GET /xfun.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:20 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 403 BYPASS - - [29/Jul/2026:02:12:20 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:20 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:21 +0000] "GET /term.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:21 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:21 +0000] "GET /file5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:21 +0000] "GET /makeasmtp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 403 BYPASS - - [29/Jul/2026:02:12:22 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:22 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:22 +0000] "GET /min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:22 +0000] "GET /mac.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 20.9.63.139 - - - 404 MISS - - [29/Jul/2026:02:12:23 +0000] "GET /nc4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.9.63.139, 20.9.63.139, 20.9.63.139, 20.9.63.139" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:13:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785291199.1912701129913330078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.66 - - - 200 BYPASS - - [29/Jul/2026:02:13:19 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.66, 198.38.94.66, 198.38.94.66, 198.38.94.66" 198.38.94.66 - - - 200 BYPASS - - [29/Jul/2026:02:13:23 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.66" 198.38.94.66 - _uid=0100007FC361696A8BF0B71F02990903 - 200 BYPASS - - [29/Jul/2026:02:13:24 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.66" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:17:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785291425.8651490211486816406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 68.183.22.192 - - - 200 BYPASS - - [29/Jul/2026:02:17:06 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.183.22.192, 68.183.22.192, 68.183.22.192, 68.183.22.192" 68.183.22.192 - - - 200 BYPASS - - [29/Jul/2026:02:17:07 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.183.22.192" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:35:59 +0000] "GET /chosen.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:35:59 +0000] "GET /xleet.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:35:59 +0000] "GET /ds.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:35:59 +0000] "GET /f5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:00 +0000] "GET /god4m.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:00 +0000] "GET /info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:36:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785292561.3581039905548095703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:02 +0000] "GET /uploads/ HTTP/1.1" 7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:02 +0000] "GET /.__info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:02 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:02 +0000] "GET /07.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:03 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:03 +0000] "GET /makeasmtp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:03 +0000] "GET /wp-sigunq.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:03 +0000] "GET /wso112233.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:04 +0000] "GET /alfanew.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:04 +0000] "GET /fw.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 200 BYPASS - - [29/Jul/2026:02:36:05 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:05 +0000] "GET /simple.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:05 +0000] "GET /classsmtps.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:06 +0000] "GET /wp-blog-header.php HTTP/1.1" 472 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:07 +0000] "GET /wp-trackback.php HTTP/1.1" 539 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 302 MISS - - [29/Jul/2026:02:36:08 +0000] "GET /wp-signup.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 405 MISS - - [29/Jul/2026:02:36:08 +0000] "GET /wp-comments-post.php HTTP/1.1" 307 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 403 MISS - - [29/Jul/2026:02:36:09 +0000] "GET /wp-mail.php HTTP/1.1" 1498 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:36:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785292569.8001539707183837890625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.202.44.182 - - - 302 MISS - - [29/Jul/2026:02:36:10 +0000] "GET /wp-activate.php HTTP/1.1" 530 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:10 +0000] "GET /post.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:11 +0000] "GET /wp-2019.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:11 +0000] "GET /hoot.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:11 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:11 +0000] "GET /bak.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:12 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:12 +0000] "GET /upfile.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:12 +0000] "GET /bypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:12 +0000] "GET /updates.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:13 +0000] "GET /xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:13 +0000] "GET /ae.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:13 +0000] "GET /moon.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:13 +0000] "GET /blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:14 +0000] "GET /ini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:14 +0000] "GET /admin-ajax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:14 +0000] "GET /akc.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:14 +0000] "GET /akcc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:15 +0000] "GET /asasx.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:15 +0000] "GET /axx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:15 +0000] "GET /berax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:15 +0000] "GET /build.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:16 +0000] "GET /buy.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:16 +0000] "GET /checkbox.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:16 +0000] "GET /cong.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:16 +0000] "GET /file4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:17 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:17 +0000] "GET /form.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:17 +0000] "GET /gecko.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:17 +0000] "GET /kyami.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:18 +0000] "GET /manager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:18 +0000] "GET /mari.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 HIT - - [29/Jul/2026:02:36:18 +0000] "GET /nc4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 172.202.44.182 - - - 404 MISS - - [29/Jul/2026:02:36:19 +0000] "GET /cgi-bin/ HTTP/1.1" 7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.202.44.182, 172.202.44.182, 172.202.44.182, 172.202.44.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:02:42:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785292959.3425939083099365234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:02:42:39 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 195.130.35.148, 195.130.35.148, 195.130.35.148" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:02:42:41 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:28:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785295724.9407660961151123046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 150.95.105.14 - - - 200 BYPASS - - [29/Jul/2026:03:28:45 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "150.95.105.14, 150.95.105.14, 150.95.105.14, 150.95.105.14" 150.95.105.14 - - - 200 BYPASS - - [29/Jul/2026:03:28:49 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "150.95.105.14" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:48:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785296921.2980968952178955078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:03:48:41 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:03:48:56 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87" 198.38.94.87 - _uid=0100007F2878696A8BF0B71F022C1103 - 200 BYPASS - - [29/Jul/2026:03:48:57 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:03:51:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785297101.7349131107330322265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 13.212.77.106 - - - 200 BYPASS - - [29/Jul/2026:03:51:42 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "13.212.77.106, 13.212.77.106, 13.212.77.106, 13.212.77.106" 13.212.77.106 - - - 200 BYPASS - - [29/Jul/2026:03:51:44 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "13.212.77.106" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:12:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785298375.4664809703826904296875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 250.23.160.168 - - - 200 MISS - - [29/Jul/2026:04:12:56 +0000] "GET /robots.txt HTTP/1.1" 565 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" "250.23.160.168" 134.209.147.209 - - - 200 BYPASS - - [29/Jul/2026:04:13:37 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "134.209.147.209, 134.209.147.209, 134.209.147.209, 134.209.147.209" 134.209.147.209 - - - 200 BYPASS - - [29/Jul/2026:04:13:39 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "134.209.147.209" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:04:36:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785299765.1888880729675292968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:04:36:05 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:04:36:07 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:02:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785301365.3387110233306884765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:05:02:45 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:05:03:13 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17" 198.38.94.17 - _uid=0100007F9189696A8BF0B71F021A1703 - 200 BYPASS - - [29/Jul/2026:05:03:14 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:04:59 +0000] "GET /admin/upload/css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:04:59 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:04:59 +0000] "GET /wp-includes/autoloadclassmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:04:59 +0000] "GET /wp-class.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:00 +0000] "GET /acp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:00 +0000] "GET /g.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:00 +0000] "GET /.well-known/caches.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:00 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:01 +0000] "GET /wp-includes/css/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:01 +0000] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:05:03 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=16c27656be HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:05:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785301503.3085350990295410156250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:05:05:03 +0000] "GET /wp-admin/network/admin.php HTTP/1.1" 619 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:04 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:04 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:04 +0000] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 HIT - - [29/Jul/2026:05:05:05 +0000] "GET /themes.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:05 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 HIT - - [29/Jul/2026:05:05:05 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:05 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:06 +0000] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:06 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:06 +0000] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:06 +0000] "GET /wp-admin/images/cloud.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:07 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:07 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:07 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:08 +0000] "GET /files.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:08 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:08 +0000] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:08 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:09 +0000] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:09 +0000] "GET /wp-includes/js/tinymce/plugins/compat3x/css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:09 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:10 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:10 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:10 +0000] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:10 +0000] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:11 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 HIT - - [29/Jul/2026:05:05:11 +0000] "GET /wp-trackback.php HTTP/1.1" 520 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:11 +0000] "GET /wp-content/uploads/cong.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:11 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:05:05:12 +0000] "GET /wp-admin/index.php HTTP/1.1" 609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:12 +0000] "GET /webadmin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:05:05:13 +0000] "GET /wp-admin/ HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:14 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:14 +0000] "GET /ova.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:14 +0000] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:14 +0000] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 302 BYPASS - - [29/Jul/2026:05:05:15 +0000] "GET /wp-admin/users.php HTTP/1.1" 609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:16 +0000] "GET /defaults.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:16 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:16 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:16 +0000] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:17 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:17 +0000] "GET /wp-includes/plugins.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:17 +0000] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:18 +0000] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:18 +0000] "GET /wp-admin/css/network.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:18 +0000] "GET /assets/bypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:19 +0000] "GET /sx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:19 +0000] "GET /wp-admin/images/chosen.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:19 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:19 +0000] "GET /wp-admin/install.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:20 +0000] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:20 +0000] "GET /cgi-bin/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:20 +0000] "GET /wp-admin/css/colors/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:21 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:21 +0000] "GET /comfunctions.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 HIT - - [29/Jul/2026:05:05:21 +0000] "GET /images/class-config.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:21 +0000] "GET /wp-includes/widgets/include.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:22 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:22 +0000] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 403 BYPASS - - [29/Jul/2026:05:05:22 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:23 +0000] "GET /.well-known/file.php/ HTTP/1.1" 7194 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:24 +0000] "GET /wp-includes/SimplePie/gzdecodes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:24 +0000] "GET /wp-back.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 BYPASS - - [29/Jul/2026:05:05:24 +0000] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 20.151.221.234 - - - 404 MISS - - [29/Jul/2026:05:05:24 +0000] "GET /themes/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.151.221.234, 20.151.221.234, 20.151.221.234, 20.151.221.234" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:18:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785302337.1996550559997558593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 49.51.243.156 - - - 200 MISS - - [29/Jul/2026:05:18:57 +0000] "GET /x-7/ HTTP/1.1" 33455 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" "49.51.243.156" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:20:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785302426.7887489795684814453125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 167.71.218.184 - - - 200 BYPASS - - [29/Jul/2026:05:20:27 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.218.184, 167.71.218.184, 167.71.218.184, 167.71.218.184" 167.71.218.184 - - - 200 BYPASS - - [29/Jul/2026:05:20:29 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.218.184" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:23:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785302583.1735439300537109375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 156.244.46.207 - - - 200 BYPASS - - [29/Jul/2026:05:23:03 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 156.244.46.207, 156.244.46.207, 156.244.46.207" 156.244.46.207 - - - 200 BYPASS - - [29/Jul/2026:05:23:04 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207" 156.244.46.207 - _uid=0100007F388E696A8BF0B71F02BD1903 - 200 BYPASS - - [29/Jul/2026:05:23:05 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:42:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785303760.2412350177764892578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.234.184.142 - - - 200 BYPASS - - [29/Jul/2026:05:42:40 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "172.234.184.142, 172.234.184.142, 172.234.184.142, 172.234.184.142" 172.234.184.142 - - - 200 MISS - - [29/Jul/2026:05:42:42 +0000] "GET /?rest_route=/wp/v2/users HTTP/1.1" 1129 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "172.234.184.142, 172.234.184.142, 172.234.184.142, 172.234.184.142" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:45:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785303909.5018351078033447265625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 167.172.73.193 - - - 200 BYPASS - - [29/Jul/2026:05:45:10 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.172.73.193, 167.172.73.193, 167.172.73.193, 167.172.73.193" 167.172.73.193 - - - 200 BYPASS - - [29/Jul/2026:05:45:11 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.172.73.193" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:51:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785304286.0233910083770751953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:57:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785304655.4397580623626708984375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:05:58:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785304738.1899580955505371093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 103.174.51.103 - - - 200 BYPASS - - [29/Jul/2026:05:59:38 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 103.174.51.103, 103.174.51.103, 103.174.51.103" 254.11.67.117 - - - 200 BYPASS - - [29/Jul/2026:05:59:40 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "254.11.67.117" 254.11.67.117 - _uid=0100007FCC96696A92F0672002080803 - 200 BYPASS - - [29/Jul/2026:05:59:41 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "254.11.67.117" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:01:44 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:44 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:45 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:01:45 +0000] "GET /cltbemsf.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:01:45 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:45 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 403 BYPASS - - [29/Jul/2026:06:01:46 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:01:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785304907.6987879276275634765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:01:48 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 7207 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:01:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785304908.8072249889373779296875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:01:49 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 7205 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 BYPASS - - [29/Jul/2026:06:01:50 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 7196 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 43.228.157.75 - - - 404 MISS - - [29/Jul/2026:06:01:51 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 7205 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "43.228.157.75, 43.228.157.75, 43.228.157.75, 43.228.157.75" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:07:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785305272.8320479393005371093750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 5.182.209.54 - - - 200 BYPASS - - [29/Jul/2026:06:07:53 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.182.209.54, 5.182.209.54, 5.182.209.54, 5.182.209.54" 5.182.209.54 - - - 200 BYPASS - - [29/Jul/2026:06:08:06 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.182.209.54" 194.5.48.138 - - - 403 BYPASS - - [29/Jul/2026:06:17:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.138, 194.5.48.138, 194.5.48.138, 194.5.48.138" 194.5.48.107 - - - 403 BYPASS - - [29/Jul/2026:06:17:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.107, 194.5.48.107, 194.5.48.107, 194.5.48.107" 194.5.48.104 - - - 403 BYPASS - - [29/Jul/2026:06:17:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.104, 194.5.48.104, 194.5.48.104, 194.5.48.104" 194.5.48.138 - - - 403 BYPASS - - [29/Jul/2026:06:17:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.138, 194.5.48.138, 194.5.48.138, 194.5.48.138" 194.5.48.114 - - - 403 BYPASS - - [29/Jul/2026:06:17:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.114, 194.5.48.114, 194.5.48.114, 194.5.48.114" 194.5.48.107 - - - 403 BYPASS - - [29/Jul/2026:06:17:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.107, 194.5.48.107, 194.5.48.107, 194.5.48.107" 194.5.48.115 - - - 403 BYPASS - - [29/Jul/2026:06:17:19 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.115, 194.5.48.115, 194.5.48.115, 194.5.48.115" 194.5.48.114 - - - 403 BYPASS - - [29/Jul/2026:06:17:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.114, 194.5.48.114, 194.5.48.114, 194.5.48.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:28:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785306495.7363250255584716796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 66.249.65.34 - - - 200 MISS - - [29/Jul/2026:06:28:16 +0000] "GET /robots.txt HTTP/1.1" 574 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "66.249.65.34, 66.249.65.34, 66.249.65.34, 66.249.65.34" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:30:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785306626.1607639789581298828125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 194.63.239.149 - - - 200 BYPASS - - [29/Jul/2026:06:30:26 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.63.239.149, 194.63.239.149, 194.63.239.149, 194.63.239.149" 194.63.239.149 - - - 200 BYPASS - - [29/Jul/2026:06:30:29 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.63.239.149" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:06:31:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785306716.7033970355987548828125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 65.109.112.7 - - - 200 BYPASS - - [29/Jul/2026:06:31:57 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.109.112.7, 65.109.112.7, 65.109.112.7, 65.109.112.7" 245.243.15.60 - - - 200 BYPASS - - [29/Jul/2026:06:32:01 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "245.243.15.60" 245.243.15.60 - _uid=0100007F619E696A8BF0B71F02BB2603 - 200 BYPASS - - [29/Jul/2026:06:32:02 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "245.243.15.60" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:07:04:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:07:04:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 194.5.48.175 - - - 403 BYPASS - - [29/Jul/2026:07:04:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.175, 194.5.48.175, 194.5.48.175, 194.5.48.175" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:07:04:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 194.5.48.175 - - - 403 BYPASS - - [29/Jul/2026:07:04:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.175, 194.5.48.175, 194.5.48.175, 194.5.48.175" 194.5.48.175 - - - 403 BYPASS - - [29/Jul/2026:07:04:46 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.175, 194.5.48.175, 194.5.48.175, 194.5.48.175" 194.5.48.169 - - - 403 BYPASS - - [29/Jul/2026:07:04:53 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.169, 194.5.48.169, 194.5.48.169, 194.5.48.169" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:15:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785309329.3637309074401855468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 207.180.241.245 - - - 200 BYPASS - - [29/Jul/2026:07:15:30 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "207.180.241.245, 207.180.241.245, 207.180.241.245, 207.180.241.245" 243.39.15.166 - - - 200 BYPASS - - [29/Jul/2026:07:15:36 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "243.39.15.166" 243.39.15.166 - _uid=0100007F98A8696A8BF0B71F02662D03 - 200 BYPASS - - [29/Jul/2026:07:15:37 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "243.39.15.166" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:19:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785309569.1265449523925781250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 75.98.175.110 - - - 200 BYPASS - - [29/Jul/2026:07:19:29 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "75.98.175.110, 75.98.175.110, 75.98.175.110, 75.98.175.110" 75.98.175.110 - - - 200 BYPASS - - [29/Jul/2026:07:19:30 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "75.98.175.110" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:26:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785309987.9553580284118652343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:07:26:28 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:37:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785310644.3633539676666259765625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 192.241.143.148 - - - 200 BYPASS - - [29/Jul/2026:07:37:25 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 192.241.143.148, 192.241.143.148, 192.241.143.148" 192.241.143.148 - - - 200 BYPASS - - [29/Jul/2026:07:37:27 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148" 192.241.143.148 - _uid=0100007FB7AD696A8BF0B71F02153103 - 200 BYPASS - - [29/Jul/2026:07:37:28 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:44:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785311093.8235800266265869140625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:48:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785311325.5598781108856201171875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 207.231.109.165 - - - 302 BYPASS - - [29/Jul/2026:07:48:46 +0000] "POST /wp-login.php HTTP/1.1" 1568 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "207.231.109.165, 207.231.109.165, 207.231.109.165, 207.231.109.165" 248.14.58.178 - - - 302 BYPASS - - [29/Jul/2026:07:48:47 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1" 797 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 200 BYPASS - - [29/Jul/2026:07:48:48 +0000] "GET /wp-login.php HTTP/1.1" 6380 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 37.27.122.165 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 200 BYPASS - - [29/Jul/2026:07:48:49 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=16c27656be HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 302 BYPASS - - [29/Jul/2026:07:48:49 +0000] "GET /wp-admin/profile.php HTTP/1.1" 537 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 200 BYPASS - - [29/Jul/2026:07:48:50 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fwp-admin%2Fprofile.php&reauth=1 HTTP/1.1" 8450 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 302 BYPASS - - [29/Jul/2026:07:48:51 +0000] "GET /wp-admin/plugin-install.php?tab=upload HTTP/1.1" 559 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 200 BYPASS - - [29/Jul/2026:07:48:52 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fwp-admin%2Fplugin-install.php%3Ftab%3Dupload&reauth=1 HTTP/1.1" 8468 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 302 BYPASS - - [29/Jul/2026:07:48:53 +0000] "GET /wp-admin/plugin-install.php?s=File+Manager&tab=search&type=term HTTP/1.1" 594 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 200 BYPASS - - [29/Jul/2026:07:48:54 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fwp-admin%2Fplugin-install.php%3Fs%3DFile%2BManager%26tab%3Dsearch%26type%3Dterm&reauth=1 HTTP/1.1" 8501 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 302 BYPASS - - [29/Jul/2026:07:48:55 +0000] "GET /wp-admin/theme-install.php?tab=upload HTTP/1.1" 558 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007F5FB0696A8BF0B71F020D3303 - 444 BYPASS - - [29/Jul/2026:07:48:55 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fwp-admin%2Ftheme-install.php%3Ftab%3Dupload&reauth=1 HTTP/1.1" 0 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:07:54:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785311681.7193999290466308593750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 207.231.109.165 - - - 302 BYPASS - - [29/Jul/2026:07:54:42 +0000] "POST /wp-login.php HTTP/1.1" 1568 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "207.231.109.165, 207.231.109.165, 207.231.109.165, 207.231.109.165" 248.14.58.178 - - - 302 BYPASS - - [29/Jul/2026:07:54:43 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1" 797 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007FC3B1696A8BF0B71F02233603 - 200 BYPASS - - [29/Jul/2026:07:54:44 +0000] "GET /wp-login.php HTTP/1.1" 6380 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - - - 302 BYPASS - - [29/Jul/2026:07:54:45 +0000] "POST /wp-login.php HTTP/1.1" 1582 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 248.14.58.178 - _uid=0100007FC5B1696A8BF0B71F022C3603 - 200 BYPASS - - [29/Jul/2026:07:54:46 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1" 4173 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 37.27.122.165 - _uid=0100007FC5B1696A8BF0B71F022C3603 - 200 BYPASS - - [29/Jul/2026:07:54:48 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=48466add05 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 248.14.58.178 - _uid=0100007FC5B1696A8BF0B71F022C3603 - 500 BYPASS - - [29/Jul/2026:07:54:48 +0000] "GET /wp-admin/ HTTP/1.1" 3155 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" "248.14.58.178" 198.235.24.134 - - - 200 MISS - - [29/Jul/2026:07:55:37 +0000] "GET / HTTP/1.1" 31419 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" "198.235.24.134" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:03:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785312191.3016939163208007812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 104.43.48.106 - - - 200 BYPASS - - [29/Jul/2026:08:03:12 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "104.43.48.106, 104.43.48.106, 104.43.48.106, 104.43.48.106" 104.43.48.106 - - - 200 BYPASS - - [29/Jul/2026:08:03:22 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "104.43.48.106" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:08:10:44 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:08:10:44 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.175 - - - 403 BYPASS - - [29/Jul/2026:08:10:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.175, 194.5.48.175, 194.5.48.175, 194.5.48.175" 194.5.48.169 - - - 403 BYPASS - - [29/Jul/2026:08:10:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.169, 194.5.48.169, 194.5.48.169, 194.5.48.169" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:08:10:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:08:10:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:08:10:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.159 - - - 403 BYPASS - - [29/Jul/2026:08:10:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:08:10:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785312651.4779319763183593750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 68.178.160.25 - - - 200 BYPASS - - [29/Jul/2026:08:10:52 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.178.160.25, 68.178.160.25, 68.178.160.25, 68.178.160.25" 242.127.124.184 - - - 200 BYPASS - - [29/Jul/2026:08:10:53 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "242.127.124.184" 242.127.124.184 - _uid=0100007F8DB5696A8BF0B71F02134003 - 200 BYPASS - - [29/Jul/2026:08:10:54 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "242.127.124.184" 176.31.139.18 - - - 200 BYPASS - - [29/Jul/2026:08:19:56 +0000] "GET /robots.txt HTTP/1.1" 227 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "176.31.139.18" 176.31.139.7 - - - 200 BYPASS - - [29/Jul/2026:08:19:58 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "176.31.139.7" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:07:27 +0000] "POST /wp-cron.php?doing_wp_cron=1785316046.7717139720916748046875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:27 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25286 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:29 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 6335 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:30 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25429 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:31 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25532 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:33 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25552 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:35 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25453 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25568 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:38 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 4984 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:39 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25294 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:40 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25348 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:41 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25416 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 107.189.14.87 - - - 207 BYPASS - - [29/Jul/2026:09:07:43 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 25470 "-" "wp2shell_v2" "107.189.14.87, 107.189.14.87, 107.189.14.87, 107.189.14.87" 4.184.60.71 - - - 403 BYPASS - - [29/Jul/2026:09:17:43 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - - - 404 MISS - - [29/Jul/2026:09:17:58 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5453696A3843B74702C01D03 - 404 MISS - - [29/Jul/2026:09:17:59 +0000] "GET /nothing2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5453696A3843B74702C01D03 - 404 MISS - - [29/Jul/2026:09:18:18 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5453696A3843B74702C01D03 - 404 MISS - - [29/Jul/2026:09:18:25 +0000] "GET /error.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5453696A3843B74702C01D03 - 404 MISS - - [29/Jul/2026:09:18:27 +0000] "GET /wpo.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:09:18:29 +0000] "GET /shellalfa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F5D53696A3743AF4702300A03 - 404 MISS - - [29/Jul/2026:09:18:30 +0000] "GET /simple.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:31 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 BYPASS - - [29/Jul/2026:09:18:32 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 299 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:34 +0000] "GET /n.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:36 +0000] "GET /s.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:39 +0000] "GET /cong.php?p= HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:41 +0000] "GET /wp-includes/fonts/about.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:44 +0000] "GET /css.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:45 +0000] "GET /lv.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:46 +0000] "GET /ee.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:47 +0000] "GET /6.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:51 +0000] "GET /system_log.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:53 +0000] "GET /ab.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1567696A8BF0B71F029F0B03 - 404 MISS - - [29/Jul/2026:09:18:56 +0000] "GET /lock360.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6753696A3843B74702D81D03 - 404 MISS - - [29/Jul/2026:09:18:59 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7C61696A8BF0B71F021A0903 - 404 MISS - - [29/Jul/2026:09:19:01 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8061696A8BF0B71F02330903 - 404 MISS - - [29/Jul/2026:09:19:02 +0000] "GET /abcd.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8061696A8BF0B71F02330903 - 404 MISS - - [29/Jul/2026:09:19:05 +0000] "GET /gifclass.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8061696A8BF0B71F02330903 - 404 MISS - - [29/Jul/2026:09:19:06 +0000] "GET /enclas.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8061696A8BF0B71F02330903 - 404 MISS - - [29/Jul/2026:09:19:14 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7F61696A8BF0B71F02280903 - 404 MISS - - [29/Jul/2026:09:19:23 +0000] "GET /we.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7F61696A8BF0B71F02280903 - 404 MISS - - [29/Jul/2026:09:19:24 +0000] "GET /fe5.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F6F53696A3843B74702E11D03 - 404 MISS - - [29/Jul/2026:09:19:25 +0000] "GET /tgrs.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:09:19:29 +0000] "GET /ut.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:09:19:30 +0000] "GET /a3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7053696A3843B74702EB1D03 - 404 MISS - - [29/Jul/2026:09:19:31 +0000] "GET /aa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:35 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:37 +0000] "GET /3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:42 +0000] "GET /f6.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:43 +0000] "GET /fm.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:46 +0000] "GET /rrr.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:50 +0000] "GET /usep.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:56 +0000] "GET /fm.php?p= HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:19:59 +0000] "GET /0x.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:03 +0000] "GET /goat.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:08 +0000] "GET /123.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:26 +0000] "GET /taktak.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 HIT - - [29/Jul/2026:09:20:28 +0000] "GET /tgrs.php HTTP/1.1" 344 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:36 +0000] "GET /gt.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:44 +0000] "GET /aghbvr.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:50 +0000] "GET /miso.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:53 +0000] "GET /naxc.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:55 +0000] "GET /fex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:20:57 +0000] "GET /taff.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:08 +0000] "GET /bless11.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:09 +0000] "GET /aj.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:10 +0000] "GET /opts.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 HIT - - [29/Jul/2026:09:21:11 +0000] "GET /wpo.php HTTP/1.1" 344 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:12 +0000] "GET /filer.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 HIT - - [29/Jul/2026:09:21:16 +0000] "GET /enclas.php HTTP/1.1" 344 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:17 +0000] "GET /en0.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:26 +0000] "GET /kaza.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:29 +0000] "GET /wsd.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:30 +0000] "GET /gifclass4.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7B61696A8BF0B71F02150903 - 404 MISS - - [29/Jul/2026:09:21:34 +0000] "GET /info.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:36 +0000] "GET /333.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:37 +0000] "GET /cfile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:38 +0000] "GET /bless3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:39 +0000] "GET /bless.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:41 +0000] "GET /doti.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:44 +0000] "GET /031.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:45 +0000] "GET /wfile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:48 +0000] "GET /lala.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1067696A8BF0B71F028E0B03 - 404 MISS - - [29/Jul/2026:09:21:49 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:21:52 +0000] "GET /he.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:21:56 +0000] "GET /plss3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:21:58 +0000] "GET /ton.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:00 +0000] "GET /33.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:02 +0000] "GET /nfile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:03 +0000] "GET /ffile.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:08 +0000] "GET /file18.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:09 +0000] "GET /file21.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:13 +0000] "GET /yellow.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:15 +0000] "GET /file1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:17 +0000] "GET /geck.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8661696A8BF0B71F02560903 - 404 MISS - - [29/Jul/2026:09:22:18 +0000] "GET /file4.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F2067696A8BF0B71F02C30B03 - 404 MISS - - [29/Jul/2026:09:22:19 +0000] "GET /file88.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F2067696A8BF0B71F02C30B03 - 404 MISS - - [29/Jul/2026:09:22:21 +0000] "GET /7.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8561696A8BF0B71F024A0903 - 404 MISS - - [29/Jul/2026:09:22:23 +0000] "GET /size.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8561696A8BF0B71F024A0903 - 404 MISS - - [29/Jul/2026:09:22:25 +0000] "GET /bolt.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8561696A8BF0B71F024A0903 - 404 MISS - - [29/Jul/2026:09:22:26 +0000] "GET /file8.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8561696A8BF0B71F024A0903 - 404 MISS - - [29/Jul/2026:09:22:27 +0000] "GET /file2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:30 +0000] "GET /vee.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:34 +0000] "GET /a2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:36 +0000] "GET /xxa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:37 +0000] "GET /mlex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:40 +0000] "GET /030.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:43 +0000] "GET /haa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:45 +0000] "GET /xsox.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:46 +0000] "GET /classgoto24.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:50 +0000] "GET /inde.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:51 +0000] "GET /akk.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:52 +0000] "GET /alpa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:53 +0000] "GET /finny.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:55 +0000] "GET /file15.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7E61696A8BF0B71F02250903 - 404 MISS - - [29/Jul/2026:09:22:57 +0000] "GET /0x0x.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB253696A3843B74702481E03 - 404 MISS - - [29/Jul/2026:09:22:58 +0000] "GET /2clas.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:09:22:59 +0000] "GET /file9.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FB253696A3843B747024C1E03 - 404 MISS - - [29/Jul/2026:09:23:00 +0000] "GET /aaa.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 403 BYPASS - - [29/Jul/2026:09:23:02 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 403 BYPASS - - [29/Jul/2026:09:23:05 +0000] "GET /wp-admin/js/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 403 BYPASS - - [29/Jul/2026:09:23:06 +0000] "GET /wp-admin/css/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 403 BYPASS - - [29/Jul/2026:09:23:08 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 404 MISS - - [29/Jul/2026:09:23:09 +0000] "GET /pucci.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 403 BYPASS - - [29/Jul/2026:09:23:12 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 403 BYPASS - - [29/Jul/2026:09:23:12 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8461696A8BF0B71F02490903 - 404 MISS - - [29/Jul/2026:09:23:14 +0000] "GET /100.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 403 BYPASS - - [29/Jul/2026:09:23:16 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 403 BYPASS - - [29/Jul/2026:09:23:18 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:20 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 403 BYPASS - - [29/Jul/2026:09:23:22 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:24 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:25 +0000] "GET /ilex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:27 +0000] "GET /tor.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:31 +0000] "GET /klex.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:39 +0000] "GET /shell1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:44 +0000] "GET /sec.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:49 +0000] "GET /filesss.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:51 +0000] "GET /ea.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:53 +0000] "GET /gi.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:23:56 +0000] "GET /10.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F8261696A8BF0B71F023E0903 - 404 MISS - - [29/Jul/2026:09:24:08 +0000] "GET /11.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD453696A3743AF4702740A03 - 404 MISS - - [29/Jul/2026:09:24:10 +0000] "GET /12.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD553696A3843B74702771E03 - 404 MISS - - [29/Jul/2026:09:24:16 +0000] "GET /13.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD553696A3843B74702771E03 - 404 MISS - - [29/Jul/2026:09:24:18 +0000] "GET /hi.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD553696A3843B74702771E03 - 404 MISS - - [29/Jul/2026:09:24:25 +0000] "GET /v.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD553696A3843B74702771E03 - 404 MISS - - [29/Jul/2026:09:24:28 +0000] "GET /ar.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FD553696A3843B74702771E03 - 404 MISS - - [29/Jul/2026:09:24:32 +0000] "GET /chosen.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F0F67696A92F06720025B0503 - 404 MISS - - [29/Jul/2026:09:24:34 +0000] "GET /155.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F0F67696A92F06720025B0503 - 404 MISS - - [29/Jul/2026:09:24:35 +0000] "GET /ppp.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F0F67696A92F06720025B0503 - 404 MISS - - [29/Jul/2026:09:24:36 +0000] "GET /201.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F0F67696A92F06720025B0503 - 404 MISS - - [29/Jul/2026:09:24:37 +0000] "GET /install.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F128A696A8BF0B71F02901703 - 404 MISS - - [29/Jul/2026:09:24:38 +0000] "GET /max.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F128A696A8BF0B71F02901703 - 404 MISS - - [29/Jul/2026:09:24:42 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F7F61696A92F0672002DD0403 - 404 MISS - - [29/Jul/2026:09:24:42 +0000] "GET /bak.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1B67696A8BF0B71F02AE0B03 - 404 MISS - - [29/Jul/2026:09:24:43 +0000] "GET /ini.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1E67696A8BF0B71F02B80B03 - 404 MISS - - [29/Jul/2026:09:24:45 +0000] "GET /mail.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007F1E67696A8BF0B71F02B80B03 - 404 MISS - - [29/Jul/2026:09:24:46 +0000] "GET /dlu.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:24:47 +0000] "GET /zde.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:24:50 +0000] "GET /ifm.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:24:53 +0000] "GET /redi.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:24:56 +0000] "GET /fns.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:24:57 +0000] "GET /pent.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:00 +0000] "GET /wsx.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:04 +0000] "GET /r79.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:06 +0000] "GET /mpxct.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:12 +0000] "GET /x3.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:15 +0000] "GET /wan.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:20 +0000] "GET /iov.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:21 +0000] "GET /RsR.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:23 +0000] "GET /ouh.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:24 +0000] "GET /133.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:26 +0000] "GET /x0.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:29 +0000] "GET /wsr2.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:31 +0000] "GET /hq.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:33 +0000] "GET /blox.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:42 +0000] "GET /ant.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:52 +0000] "GET /fso.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 403 BYPASS - - [29/Jul/2026:09:25:57 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 4.184.60.71 - _uid=0100007FE953696A3843B74702A21E03 - 404 MISS - - [29/Jul/2026:09:25:58 +0000] "GET /2P.php HTTP/1.1" 345 "-" "-" "4.184.60.71, 4.184.60.71, 4.184.60.71, 4.184.60.71" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:40:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785318024.9183230400085449218750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 167.88.167.87 - - - 200 MISS - - [29/Jul/2026:09:40:25 +0000] "GET / HTTP/1.1" 7288 "-" "Mozilla/5.0" "167.88.167.87, 167.88.167.87, 167.88.167.87, 167.88.167.87" 5.133.192.160 - - - 200 HIT - - [29/Jul/2026:09:40:56 +0000] "GET / HTTP/1.1" 7287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" "5.133.192.160, 5.133.192.160, 5.133.192.160, 5.133.192.160" 5.133.192.160 - - - 404 BYPASS - - [29/Jul/2026:09:40:57 +0000] "GET /favicon.ico HTTP/1.1" 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" "5.133.192.160, 5.133.192.160, 5.133.192.160, 5.133.192.160" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:46:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785318418.3313090801239013671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 103.90.234.13 - - - 200 BYPASS - - [29/Jul/2026:09:46:58 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.90.234.13, 103.90.234.13, 103.90.234.13, 103.90.234.13" 103.90.234.13 - - - 200 BYPASS - - [29/Jul/2026:09:47:02 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.90.234.13" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:09:59:47 +0000] "POST /wp-cron.php?doing_wp_cron=1785319186.8383591175079345703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 138.68.158.60 - - - 200 BYPASS - - [29/Jul/2026:09:59:47 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "138.68.158.60, 138.68.158.60, 138.68.158.60, 138.68.158.60" 138.68.158.60 - - - 200 BYPASS - - [29/Jul/2026:09:59:48 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "138.68.158.60" 138.68.158.60 - _uid=0100007F14CF696A8BF0B71F027E6D03 - 200 BYPASS - - [29/Jul/2026:09:59:49 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "138.68.158.60" 20.113.56.22 - - - 403 BYPASS - - [29/Jul/2026:10:28:12 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:28:12 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F46C5696A8BF0B71F02486503 - 404 MISS - - [29/Jul/2026:10:28:13 +0000] "GET /x.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F083E696A5E22FF3A02520403 - 404 MISS - - [29/Jul/2026:10:28:13 +0000] "GET /mgrr.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F083E696A5E22FF3A02520403 - 404 MISS - - [29/Jul/2026:10:28:13 +0000] "GET /001.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F083E696A5E22FF3A02520403 - 404 MISS - - [29/Jul/2026:10:28:14 +0000] "GET /yup.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:14 +0000] "GET /X.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:14 +0000] "GET /1polka.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:15 +0000] "GET /gec.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:15 +0000] "GET /sky.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:15 +0000] "GET /fffm.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:16 +0000] "GET /sixxis.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:16 +0000] "GET /yj09.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:16 +0000] "GET /k.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:17 +0000] "GET /k2.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:17 +0000] "GET /w.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7A61696A8BF0B71F02100903 - 404 MISS - - [29/Jul/2026:10:28:17 +0000] "GET /fpwch.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7A61696A8BF0B71F02100903 - 404 MISS - - [29/Jul/2026:10:28:18 +0000] "GET /w2025.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:18 +0000] "GET /FWAZ.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:18 +0000] "GET /qterm.php?p= HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:19 +0000] "GET /blurbs.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:19 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:20 +0000] "GET /xyn.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:20 +0000] "GET /ccc.php?p= HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:21 +0000] "GET /get.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:21 +0000] "GET /images.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:22 +0000] "GET /alls.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:22 +0000] "GET /coffexium.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:22 +0000] "GET /red.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 403 BYPASS - - [29/Jul/2026:10:28:23 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 BYPASS - - [29/Jul/2026:10:28:23 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 299 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 403 BYPASS - - [29/Jul/2026:10:28:24 +0000] "GET /wp-includes/Text/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 403 BYPASS - - [29/Jul/2026:10:28:25 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 403 BYPASS - - [29/Jul/2026:10:28:25 +0000] "GET /wp-content/index.php HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:26 +0000] "GET ///admin.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:26 +0000] "GET /177.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:27 +0000] "GET /199.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:27 +0000] "GET /file52.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 HIT - - [29/Jul/2026:10:28:27 +0000] "GET /geck.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:28 +0000] "GET /biufile.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:28 +0000] "GET /dejavu.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FC3D5696A8BF0B71F029E7303 - 404 MISS - - [29/Jul/2026:10:28:29 +0000] "GET /aaf.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:29 +0000] "GET /ha.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:29 +0000] "GET /hur.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:30 +0000] "GET /h02ugyh.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:28:30 +0000] "GET /155.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:30 +0000] "GET /ops.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:31 +0000] "GET /ingfo.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:31 +0000] "GET /error_log.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:32 +0000] "GET /koala.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:28:32 +0000] "GET /mac.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:28:32 +0000] "GET /wefile.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 403 BYPASS - - [29/Jul/2026:10:28:33 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 385 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:33 +0000] "GET /wp-admin/js/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:34 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:34 +0000] "GET /2P.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:35 +0000] "GET /.well-known/about.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:35 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:36 +0000] "GET /system_log.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:36 +0000] "GET /wp-admin/css/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:37 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:37 +0000] "GET /crgio.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:38 +0000] "GET /pucci.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:38 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:39 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:39 +0000] "GET /wp-temp.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 BYPASS - - [29/Jul/2026:10:28:40 +0000] "GET //wp-admin/js/index.php HTTP/1.1" 299 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:41 +0000] "GET /puc.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:41 +0000] "GET /dx.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:41 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:42 +0000] "GET /7.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:42 +0000] "GET /8.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:43 +0000] "GET /1.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 HIT - - [29/Jul/2026:10:28:43 +0000] "GET /about.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:43 +0000] "GET //admin.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:44 +0000] "GET //edit.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 403 BYPASS - - [29/Jul/2026:10:28:44 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FD1D5696A8BF0B71F02BC7303 - 404 MISS - - [29/Jul/2026:10:28:45 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 404 MISS - - [29/Jul/2026:10:28:45 +0000] "GET //av.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 404 MISS - - [29/Jul/2026:10:28:45 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 403 BYPASS - - [29/Jul/2026:10:28:46 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 404 MISS - - [29/Jul/2026:10:28:46 +0000] "GET /wp-blog.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 403 BYPASS - - [29/Jul/2026:10:28:47 +0000] "GET //wp-includes/js/jquery/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 403 BYPASS - - [29/Jul/2026:10:28:47 +0000] "GET //wp-content/admin.php HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 404 MISS - - [29/Jul/2026:10:28:48 +0000] "GET //adminfuns.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 404 MISS - - [29/Jul/2026:10:28:48 +0000] "GET //goods.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8261696A8BF0B71F023D0903 - 404 MISS - - [29/Jul/2026:10:28:49 +0000] "GET /ms-edit.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F0A3E696A6022FC3A0222F903 - 404 HIT - - [29/Jul/2026:10:28:49 +0000] "GET /222.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F0A3E696A6022FC3A0222F903 - 404 HIT - - [29/Jul/2026:10:28:50 +0000] "GET //cgi-bin/index.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F0A3E696A6022FC3A0222F903 - 403 BYPASS - - [29/Jul/2026:10:28:50 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F0A3E696A6022FC3A0222F903 - 404 MISS - - [29/Jul/2026:10:28:51 +0000] "GET /BDKR28WP.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F339E686A6022FC3A026F7603 - 403 BYPASS - - [29/Jul/2026:10:28:51 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F339E686A6022FC3A026F7603 - 403 BYPASS - - [29/Jul/2026:10:28:52 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F339E686A6022FC3A026F7603 - 404 MISS - - [29/Jul/2026:10:28:52 +0000] "GET /wp.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 404 MISS - - [29/Jul/2026:10:28:53 +0000] "GET //abcd.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 404 MISS - - [29/Jul/2026:10:28:53 +0000] "GET //a1.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 404 MISS - - [29/Jul/2026:10:28:54 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 404 MISS - - [29/Jul/2026:10:28:54 +0000] "GET //cgi-bin/admin.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 403 BYPASS - - [29/Jul/2026:10:28:55 +0000] "GET /wp-content/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 404 HIT - - [29/Jul/2026:10:28:55 +0000] "GET /simple.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F7E61696A8BF0B71F02240903 - 404 MISS - - [29/Jul/2026:10:28:56 +0000] "GET /xxx.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 404 MISS - - [29/Jul/2026:10:28:56 +0000] "GET /hypo.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 403 BYPASS - - [29/Jul/2026:10:28:57 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 404 HIT - - [29/Jul/2026:10:28:57 +0000] "GET /chosen.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 403 BYPASS - - [29/Jul/2026:10:28:58 +0000] "GET //wp-includes/block-bindings/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 404 MISS - - [29/Jul/2026:10:28:58 +0000] "GET /als.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 404 MISS - - [29/Jul/2026:10:28:59 +0000] "GET /pol.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F5A3B696A6022FC3A024FF503 - 404 MISS - - [29/Jul/2026:10:28:59 +0000] "GET /file5.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8561696A92F0672002E00403 - 404 MISS - - [29/Jul/2026:10:28:59 +0000] "GET /file.php? HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8561696A92F0672002E00403 - 404 MISS - - [29/Jul/2026:10:29:00 +0000] "GET /admin.php? HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F8561696A92F0672002E00403 - 404 MISS - - [29/Jul/2026:10:29:00 +0000] "GET /aa2.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:01 +0000] "GET /ccou.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:01 +0000] "GET /dr.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:01 +0000] "GET /xamp.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:29:02 +0000] "GET /bless.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:02 +0000] "GET /file25.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:02 +0000] "GET /file6.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:29:03 +0000] "GET /a2.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:29:03 +0000] "GET /file15.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:04 +0000] "GET /f35.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:29:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785320945.1256480216979980468750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 20.113.56.22 - - - 200 MISS - - [29/Jul/2026:10:29:05 +0000] "GET /wp-load.php HTTP/1.1" 385 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 404 MISS - - [29/Jul/2026:10:29:06 +0000] "GET //xwpg.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 403 BYPASS - - [29/Jul/2026:10:29:06 +0000] "GET //wp-includes/assets/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 403 BYPASS - - [29/Jul/2026:10:29:07 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 297 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 404 MISS - - [29/Jul/2026:10:29:08 +0000] "GET /xstelth.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 37.27.122.165 - _uid=0100007FF1D5696A92F06720026F3603 - 200 BYPASS - - [29/Jul/2026:10:29:09 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=16c27656be HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 302 BYPASS - - [29/Jul/2026:10:29:09 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 533 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 200 BYPASS - - [29/Jul/2026:10:29:10 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fnetwork%2Fplugins.php&reauth=1 HTTP/1.1" 8532 "-" "-" "20.113.56.22" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 404 HIT - - [29/Jul/2026:10:29:11 +0000] "GET /aaa.php HTTP/1.1" 344 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FF1D5696A92F06720026F3603 - 404 MISS - - [29/Jul/2026:10:29:11 +0000] "GET /gecko.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F2167696A8BF0B71F02C60B03 - 404 MISS - - [29/Jul/2026:10:29:12 +0000] "GET /pbck.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007F2167696A8BF0B71F02C60B03 - 404 MISS - - [29/Jul/2026:10:29:12 +0000] "GET /xiugai.php?p= HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:12 +0000] "GET /e.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:13 +0000] "GET /adminner.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:13 +0000] "GET /file1221.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:13 +0000] "GET /inx.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:14 +0000] "GET /qqqa.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:14 +0000] "GET /wp-firewall.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFAD5696A8BF0B71F02E07303 - 404 MISS - - [29/Jul/2026:10:29:15 +0000] "GET /reviall.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:15 +0000] "GET /404.php?p= HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 HIT - - [29/Jul/2026:10:29:15 +0000] "GET /bolt.php HTTP/1.1" 432 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:16 +0000] "GET /File.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:16 +0000] "GET /fi22.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:16 +0000] "GET /zero.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:17 +0000] "GET /1xmomo.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:17 +0000] "GET /fmws.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:17 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - - - 404 MISS - - [29/Jul/2026:10:29:18 +0000] "GET /hp2.php HTTP/1.1" 433 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:18 +0000] "GET /aabb.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:19 +0000] "GET /1254xx.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:20 +0000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:20 +0000] "GET /ffs.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:21 +0000] "GET /pms297.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:21 +0000] "GET /1PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:22 +0000] "GET /2PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:23 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:23 +0000] "GET /5PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:23 +0000] "GET /6PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:24 +0000] "GET /7PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:25 +0000] "GET /8PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:25 +0000] "GET /9PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:26 +0000] "GET /10PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:27 +0000] "GET /0PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 20.113.56.22 - _uid=0100007FFED5696A92F06720027D3603 - 404 MISS - - [29/Jul/2026:10:29:27 +0000] "GET /bbcc.php HTTP/1.1" 345 "-" "-" "20.113.56.22, 20.113.56.22, 20.113.56.22, 20.113.56.22" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:10:32:12 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.159 - - - 403 BYPASS - - [29/Jul/2026:10:32:12 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:10:32:12 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:10:32:13 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:10:32:13 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:10:32:13 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.161 - - - 403 BYPASS - - [29/Jul/2026:10:32:14 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.161, 194.5.48.161, 194.5.48.161, 194.5.48.161" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:10:32:17 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 167.172.93.1 - - - 200 BYPASS - - [29/Jul/2026:10:44:30 +0000] "GET /license.txt HTTP/1.1" 227 "-" "python-requests/2.27.1" "167.172.93.1, 167.172.93.1, 167.172.93.1, 167.172.93.1" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:15 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:16 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:16 +0000] "GET /mini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:16 +0000] "GET /aa.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:16 +0000] "GET /w.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:17 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:17 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:17 +0000] "GET /m.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:18 +0000] "GET /wp-admin/css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:18 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:18 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:18 +0000] "GET /gmo.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:19 +0000] "GET /wp-content/languages/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:19 +0000] "GET /wp-the.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:19 +0000] "GET /404.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:20 +0000] "GET /init.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:20 +0000] "GET /file5.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:20 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:21 +0000] "GET /shell.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:21 +0000] "GET /f35.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:21 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:21 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:49:22 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=16c27656be HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:49:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785322163.0938849449157714843750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 74.248.33.8 - - - 302 BYPASS - - [29/Jul/2026:10:49:23 +0000] "GET /wp-admin/ HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:24 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:24 +0000] "GET /fm.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:25 +0000] "GET /admin/controller/extension/ HTTP/1.1" 7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:25 +0000] "GET /file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:26 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:26 +0000] "GET /bolt.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:26 +0000] "GET /3.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:26 +0000] "GET /222.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:27 +0000] "GET /wp-admin/images/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:27 +0000] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:27 +0000] "GET /wp-includes/Requests/library/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:28 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:28 +0000] "GET /wp-configs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:28 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:29 +0000] "GET /wp-includes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:29 +0000] "GET /wp-admin/a.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:29 +0000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:30 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:30 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:31 +0000] "GET /wp-admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:31 +0000] "GET /size.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:31 +0000] "GET /wp-includes/wp-class.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:32 +0000] "GET /403.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:32 +0000] "GET /wp-includes/IXR/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:32 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:33 +0000] "GET /wp-admin/includes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:33 +0000] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:34 +0000] "GET /plugins.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:34 +0000] "GET /wp-includes/js/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:34 +0000] "GET /go.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:34 +0000] "GET /test1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:35 +0000] "GET /wp-admin/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:35 +0000] "GET /images/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:35 +0000] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:36 +0000] "GET /asd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:36 +0000] "GET /wp-includes/customize/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:36 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:37 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:37 +0000] "GET /wp-includes/html-api/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:37 +0000] "GET /wp-admin/js/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:38 +0000] "GET /wp-includes/IXR/chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:38 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:38 +0000] "GET /wp-includes/blocks/block/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:39 +0000] "GET /wp-includes/rest-api/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:39 +0000] "GET /inputs.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:39 +0000] "GET /wp-content/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 BYPASS - - [29/Jul/2026:10:49:40 +0000] "GET /wp-admin/network/index.php HTTP/1.1" 619 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:41 +0000] "GET /wp-content/1.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:41 +0000] "GET /plugin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:41 +0000] "GET /1.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:42 +0000] "GET /gg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:42 +0000] "GET /wp-includes/images/crystal/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:42 +0000] "GET /wp.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:43 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:43 +0000] "GET /wp-admin/file.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 BYPASS - - [29/Jul/2026:10:49:44 +0000] "GET /wp-admin/user/index.php HTTP/1.1" 616 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:45 +0000] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 7205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:45 +0000] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:46 +0000] "GET /index/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:46 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:46 +0000] "GET /wp-includes/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:47 +0000] "GET /aaa.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:47 +0000] "GET /getid3-core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:47 +0000] "GET /adminer.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:47 +0000] "GET /wp-content/uploads/2024/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:48 +0000] "GET /alfa.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:48 +0000] "GET /wp-content/uploads/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:48 +0000] "GET /wp-content/themes/alera/alpha.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:49 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:49 +0000] "GET /wp-content/plugins/linkpreview/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:49 +0000] "GET /edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:50 +0000] "GET /wp-includes/block-supports/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:50 +0000] "GET /wp-content/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:50 +0000] "GET /sf.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:51 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:51 +0000] "GET /wso.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:51 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:51 +0000] "GET /file56.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:52 +0000] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:10:49:52 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:52 +0000] "GET /wp-content/edit.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:53 +0000] "GET /2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:53 +0000] "GET /wp-content/uploads/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:54 +0000] "GET /mah.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:54 +0000] "GET /send.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:54 +0000] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:54 +0000] "GET /wp-includes/js/crop/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:10:49:55 +0000] "GET /about.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:55 +0000] "GET /options.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:10:49:55 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:56 +0000] "GET /wp-file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:10:49:56 +0000] "GET /sid3.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:10:51:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785322260.3141300678253173828125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:10:51:00 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:10:51:28 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17" 198.38.94.17 - _uid=0100007F30DB696A8BF0B71F02FA7803 - 200 BYPASS - - [29/Jul/2026:10:51:29 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:01:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785322918.8096110820770263671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 209.42.28.13 - - - 200 BYPASS - - [29/Jul/2026:11:01:59 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.28.13, 209.42.28.13, 209.42.28.13, 209.42.28.13" 209.42.28.13 - - - 200 BYPASS - - [29/Jul/2026:11:02:20 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.28.13" 209.42.28.13 - _uid=0100007FBCDD696A8BF0B71F02867B03 - 200 BYPASS - - [29/Jul/2026:11:02:21 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.28.13" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:07:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785323221.5929470062255859375000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 185.165.29.159 - - - 200 BYPASS - - [29/Jul/2026:11:07:02 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.165.29.159, 185.165.29.159, 185.165.29.159, 185.165.29.159" 185.165.29.159 - - - 200 BYPASS - - [29/Jul/2026:11:07:03 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.165.29.159" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:33:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785324809.5524659156799316406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:11:33:30 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:11:33:44 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:43:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785325417.4914360046386718750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 91.202.233.61 - - - 200 MISS - - [29/Jul/2026:11:43:38 +0000] "GET /?_wplogin=35fe7057ffed92ff7bc5a0b90f302a77fb5843ad6c972294d68da0b0553b3900 HTTP/1.1" 7288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "91.202.233.61, 91.202.233.61, 91.202.233.61, 91.202.233.61" 91.202.233.61 - - - 200 MISS - - [29/Jul/2026:11:43:39 +0000] "GET /?_wpm=35fe7057ffed92ff7bc5a0b90f302a77fb5843ad6c972294d68da0b0553b3900 HTTP/1.1" 7288 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "91.202.233.61, 91.202.233.61, 91.202.233.61, 91.202.233.61" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:53:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785326023.5466849803924560546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 208.115.224.246 - - - 200 BYPASS - - [29/Jul/2026:11:53:44 +0000] "POST /wp-login.php HTTP/1.1" 2680 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36" "208.115.224.246, 208.115.224.246, 208.115.224.246, 208.115.224.246" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:11:57:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785326270.4841220378875732421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:11:57:51 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 135.148.171.117, 135.148.171.117, 135.148.171.117" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:11:57:56 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117" 194.5.48.205 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.205, 194.5.48.205, 194.5.48.205, 194.5.48.205" 194.5.48.202 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.202, 194.5.48.202, 194.5.48.202, 194.5.48.202" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.207 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.207, 194.5.48.207, 194.5.48.207, 194.5.48.207" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 194.5.48.207 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.207, 194.5.48.207, 194.5.48.207, 194.5.48.207" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:11:58:33 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:11:58:34 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:21:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785327706.3269920349121093750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 185.115.217.185 - - - 200 BYPASS - - [29/Jul/2026:12:21:47 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.115.217.185, 185.115.217.185, 185.115.217.185, 185.115.217.185" 185.115.217.185 - - - 200 BYPASS - - [29/Jul/2026:12:21:48 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.115.217.185" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:40:44 +0000] "POST /wp-cron.php?doing_wp_cron=1785328843.6808838844299316406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:12:40:44 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67" 198.38.94.67 - - - 200 BYPASS - - [29/Jul/2026:12:40:52 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67" 198.38.94.67 - _uid=0100007FD4F4696A8BF0B71F02A18B03 - 200 BYPASS - - [29/Jul/2026:12:40:53 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:12:47:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785329262.5124421119689941406250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 27.255.172.6 - - - 200 BYPASS - - [29/Jul/2026:12:47:43 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "27.255.172.6, 27.255.172.6, 27.255.172.6, 27.255.172.6" 27.255.172.6 - - - 200 BYPASS - - [29/Jul/2026:12:48:08 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "27.255.172.6" 17.246.23.155 - - - 200 BYPASS - - [29/Jul/2026:13:10:14 +0000] "GET /robots.txt HTTP/1.1" 227 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "17.246.23.155" 17.246.23.155 - - - 200 BYPASS - - [29/Jul/2026:13:10:14 +0000] "GET /feed/ HTTP/1.1" 241 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "17.246.23.155" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:13:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785330832.8444619178771972656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:13:13:53 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:13:13:55 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:16:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785330969.8115921020507812500000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 85.11.167.5 - - - 200 BYPASS - - [29/Jul/2026:13:16:10 +0000] "GET /wp-login.php HTTP/1.1" 2558 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 85.11.167.5 - _uid=0100007F1AFD696A8BF0B71F02878F03 - 302 BYPASS - - [29/Jul/2026:13:16:11 +0000] "POST /wp-login.php HTTP/1.1" 1480 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 85.11.167.5 - - - 302 BYPASS - - [29/Jul/2026:13:16:12 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1" 797 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5" 85.11.167.5 - _uid=0100007F1CFD696A8BF0B71F028B8F03 - 200 BYPASS - - [29/Jul/2026:13:16:13 +0000] "GET /wp-login.php HTTP/1.1" 6380 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5" 85.11.167.5 - - - 200 BYPASS - - [29/Jul/2026:13:16:14 +0000] "POST /wp-login.php HTTP/1.1" 3436 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 37.27.122.165 - _uid=0100007F1EFD696A8BF0B71F028C8F03 - 200 BYPASS - - [29/Jul/2026:13:16:15 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=188480a72d HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 85.11.167.5 - _uid=0100007F1EFD696A8BF0B71F028C8F03 - 500 BYPASS - - [29/Jul/2026:13:16:15 +0000] "GET /wp-admin/ HTTP/1.1" 3149 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 172.202.95.21 - - - 403 BYPASS - - [29/Jul/2026:13:29:02 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F1E006A6A92F0672002F44103 - 404 MISS - - [29/Jul/2026:13:29:02 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:03 +0000] "GET /xstelth.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:03 +0000] "GET /584062352875874akp.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:03 +0000] "GET /newfile.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:03 +0000] "GET /tBEZGQz.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:29:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785331744.6859960556030273437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:05 +0000] "GET /phpinfo?re@=vo@ HTTP/1.1" 7110 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:05 +0000] "GET //drykl.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 403 BYPASS - - [29/Jul/2026:13:29:05 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 297 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:06 +0000] "GET /ls.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 HIT - - [29/Jul/2026:13:29:06 +0000] "GET /dx.php HTTP/1.1" 344 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FBCD5696A92F0672002483603 - 404 MISS - - [29/Jul/2026:13:29:06 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 MISS - - [29/Jul/2026:13:29:07 +0000] "GET /485.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 MISS - - [29/Jul/2026:13:29:08 +0000] "GET /gelio1.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 MISS - - [29/Jul/2026:13:29:12 +0000] "GET /lp6.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 BYPASS - - [29/Jul/2026:13:29:26 +0000] "GET /wp-admin/maint/admin.php HTTP/1.1" 299 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 403 BYPASS - - [29/Jul/2026:13:29:34 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 297 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 MISS - - [29/Jul/2026:13:29:37 +0000] "GET /w3llscc.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 MISS - - [29/Jul/2026:13:29:39 +0000] "GET /miru3.php?p= HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD0D5696A8BF0B71F02BA7303 - 404 MISS - - [29/Jul/2026:13:29:40 +0000] "GET /autoload_classmap.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 403 BYPASS - - [29/Jul/2026:13:29:41 +0000] "GET /wp-content/ HTTP/1.1" 297 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 403 BYPASS - - [29/Jul/2026:13:29:42 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:44 +0000] "GET //av.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 403 BYPASS - - [29/Jul/2026:13:29:45 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 BYPASS - - [29/Jul/2026:13:29:47 +0000] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 7134 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:50 +0000] "GET /tiny.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:51 +0000] "GET /BsMPQ6Wavdefault.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:53 +0000] "GET /zrrhj.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:54 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:55 +0000] "GET /wpgum.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:56 +0000] "GET /ywwbf.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:29:58 +0000] "GET /xoldj.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:30:01 +0000] "GET //f35.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:30:02 +0000] "GET /gk.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:30:05 +0000] "GET /wper3.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F653B696A6022FC3A027EF503 - 404 MISS - - [29/Jul/2026:13:30:07 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F063E696A6022FC3A0212F903 - 404 MISS - - [29/Jul/2026:13:30:08 +0000] "GET /wyzer1.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F063E696A6022FC3A0212F903 - 404 MISS - - [29/Jul/2026:13:30:09 +0000] "GET /mh.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F063E696A6022FC3A0212F903 - 404 MISS - - [29/Jul/2026:13:30:10 +0000] "GET /gvg1bvpsgtot1rpklCdefault.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F063E696A6022FC3A0212F903 - 404 MISS - - [29/Jul/2026:13:30:11 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC5DA696A8BF0B71F029D7803 - 404 MISS - - [29/Jul/2026:13:30:13 +0000] "GET /chosen.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC5DA696A8BF0B71F029D7803 - 404 MISS - - [29/Jul/2026:13:30:15 +0000] "GET /sd.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC5DA696A8BF0B71F029D7803 - 404 MISS - - [29/Jul/2026:13:30:20 +0000] "GET /z60.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 MISS - - [29/Jul/2026:13:30:22 +0000] "GET /home.php HTTP/1.1" 433 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 MISS - - [29/Jul/2026:13:30:24 +0000] "GET /ws58.php HTTP/1.1" 433 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 MISS - - [29/Jul/2026:13:30:26 +0000] "GET /gulu.php HTTP/1.1" 433 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 MISS - - [29/Jul/2026:13:30:31 +0000] "GET /6xBAm3vODE05BSzkJZRAws.php HTTP/1.1" 433 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 MISS - - [29/Jul/2026:13:30:33 +0000] "GET /wpls.php HTTP/1.1" 433 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 HIT - - [29/Jul/2026:13:30:39 +0000] "GET /php.php HTTP/1.1" 491 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FB8DA696A8BF0B71F027D7803 - 404 MISS - - [29/Jul/2026:13:30:41 +0000] "GET /100.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FB8DA696A8BF0B71F027D7803 - 404 HIT - - [29/Jul/2026:13:30:42 +0000] "GET /BDKR28WP.php HTTP/1.1" 344 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FB8DA696A8BF0B71F027D7803 - 404 MISS - - [29/Jul/2026:13:30:44 +0000] "GET /browse.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 404 MISS - - [29/Jul/2026:13:30:44 +0000] "GET /wp-good.php HTTP/1.1" 433 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F84006A6A8BF0B71F02D29103 - 404 MISS - - [29/Jul/2026:13:30:45 +0000] "GET /8573.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F84006A6A8BF0B71F02D29103 - 403 BYPASS - - [29/Jul/2026:13:30:46 +0000] "GET /wp-admin/install.php HTTP/1.1" 297 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007F84006A6A8BF0B71F02D29103 - 404 MISS - - [29/Jul/2026:13:30:47 +0000] "GET /classwithtostring.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FAEDA696A8BF0B71F02627803 - 404 MISS - - [29/Jul/2026:13:30:48 +0000] "GET /ohct.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FAEDA696A8BF0B71F02627803 - 404 MISS - - [29/Jul/2026:13:30:50 +0000] "GET /bless.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FEED5696A8BF0B71F02D27303 - 404 MISS - - [29/Jul/2026:13:30:53 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:30:56 +0000] "GET /public/mI35rZhMg1zJ1vuXdefault.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:30:59 +0000] "GET /ta0ol.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:31:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785331863.4616329669952392578125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:31:04 +0000] "GET /sa.php7 HTTP/1.1" 7110 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:31:04 +0000] "GET /wp-class.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:31:11 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:31:12 +0000] "GET /bootstrap.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:31:15 +0000] "GET /wp-blog-header.php HTTP/1.1" 384 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FD3DA696A92F0672002393903 - 404 MISS - - [29/Jul/2026:13:31:17 +0000] "GET /aa.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 404 MISS - - [29/Jul/2026:13:31:21 +0000] "GET /tx79.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 404 MISS - - [29/Jul/2026:13:31:24 +0000] "GET /motu.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 404 MISS - - [29/Jul/2026:13:31:30 +0000] "GET /wp-head.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 37.27.122.165 - _uid=0100007FACDA696A8BF0B71F025B7803 - 200 BYPASS - - [29/Jul/2026:13:31:35 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=b575981558 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 302 BYPASS - - [29/Jul/2026:13:31:35 +0000] "GET /wp-admin/options-privacy.php HTTP/1.1" 531 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - - - 200 BYPASS - - [29/Jul/2026:13:31:39 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Foptions-privacy.php&reauth=1 HTTP/1.1" 8532 "-" "-" "172.202.95.21" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 404 MISS - - [29/Jul/2026:13:31:41 +0000] "GET /60856e3a4findex.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 404 MISS - - [29/Jul/2026:13:31:43 +0000] "GET /wp-the.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FACDA696A8BF0B71F025B7803 - 404 HIT - - [29/Jul/2026:13:31:46 +0000] "GET /wp.php HTTP/1.1" 344 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC6DA696A8BF0B71F02A07803 - 404 MISS - - [29/Jul/2026:13:31:50 +0000] "GET /users.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC6DA696A8BF0B71F02A07803 - 404 MISS - - [29/Jul/2026:13:31:52 +0000] "GET /tinysd.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC6DA696A8BF0B71F02A07803 - 404 MISS - - [29/Jul/2026:13:31:59 +0000] "GET /ws78.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC6DA696A8BF0B71F02A07803 - 404 MISS - - [29/Jul/2026:13:32:11 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FF93D696A6022FC3A02E9F803 - 404 HIT - - [29/Jul/2026:13:32:15 +0000] "GET /atomlib.php HTTP/1.1" 403 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC1DA696A8BF0B71F02907803 - 404 MISS - - [29/Jul/2026:13:32:21 +0000] "GET /wyzer3.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC1DA696A8BF0B71F02907803 - 404 MISS - - [29/Jul/2026:13:32:26 +0000] "GET /max.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 172.202.95.21 - _uid=0100007FC1DA696A8BF0B71F02907803 - 404 MISS - - [29/Jul/2026:13:32:28 +0000] "GET /ftde.php HTTP/1.1" 345 "-" "-" "172.202.95.21, 172.202.95.21, 172.202.95.21, 172.202.95.21" 194.5.48.212 - - - 403 BYPASS - - [29/Jul/2026:13:41:44 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.212, 194.5.48.212, 194.5.48.212, 194.5.48.212" 194.5.48.219 - - - 403 BYPASS - - [29/Jul/2026:13:41:44 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.219, 194.5.48.219, 194.5.48.219, 194.5.48.219" 194.5.48.223 - - - 403 BYPASS - - [29/Jul/2026:13:41:44 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.223, 194.5.48.223, 194.5.48.223, 194.5.48.223" 194.5.48.222 - - - 403 BYPASS - - [29/Jul/2026:13:41:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.222, 194.5.48.222, 194.5.48.222, 194.5.48.222" 194.5.48.215 - - - 403 BYPASS - - [29/Jul/2026:13:41:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.215, 194.5.48.215, 194.5.48.215, 194.5.48.215" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:13:41:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 194.5.48.219 - - - 403 BYPASS - - [29/Jul/2026:13:41:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.219, 194.5.48.219, 194.5.48.219, 194.5.48.219" 194.5.48.217 - - - 403 BYPASS - - [29/Jul/2026:13:41:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.217, 194.5.48.217, 194.5.48.217, 194.5.48.217" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:13:47:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785332868.3573000431060791015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 85.11.167.5 - - - 200 BYPASS - - [29/Jul/2026:13:47:49 +0000] "GET /wp-login.php HTTP/1.1" 2558 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 85.11.167.5 - _uid=0100007F85046A6A92F0672002874203 - 302 BYPASS - - [29/Jul/2026:13:47:49 +0000] "POST /wp-login.php HTTP/1.1" 1480 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 85.11.167.5 - - - 302 BYPASS - - [29/Jul/2026:13:47:51 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1" 797 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5" 85.11.167.5 - _uid=0100007F87046A6A8BF0B71F02A99303 - 200 BYPASS - - [29/Jul/2026:13:47:52 +0000] "GET /wp-login.php HTTP/1.1" 6380 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5" 85.11.167.5 - - - 200 BYPASS - - [29/Jul/2026:13:47:53 +0000] "POST /wp-login.php HTTP/1.1" 3436 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 37.27.122.165 - _uid=0100007F89046A6A92F0672002884203 - 200 BYPASS - - [29/Jul/2026:13:47:54 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=d4020ffd66 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 85.11.167.5 - _uid=0100007F89046A6A92F0672002884203 - 500 BYPASS - - [29/Jul/2026:13:47:54 +0000] "GET /wp-admin/ HTTP/1.1" 3149 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:09:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785334158.0123798847198486328125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 209.145.49.99 - - - 200 BYPASS - - [29/Jul/2026:14:09:18 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99, 209.145.49.99, 209.145.49.99, 209.145.49.99" 209.145.49.99 - - - 200 BYPASS - - [29/Jul/2026:14:09:22 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.145.49.99" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:27:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785335251.3200719356536865234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 51.79.65.194 - - - 200 BYPASS - - [29/Jul/2026:14:27:31 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "51.79.65.194, 51.79.65.194, 51.79.65.194, 51.79.65.194" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:14:29:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 194.5.48.193 - - - 403 BYPASS - - [29/Jul/2026:14:29:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.193, 194.5.48.193, 194.5.48.193, 194.5.48.193" 194.5.48.185 - - - 403 BYPASS - - [29/Jul/2026:14:29:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.185, 194.5.48.185, 194.5.48.185, 194.5.48.185" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:14:29:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 194.5.48.180 - - - 403 BYPASS - - [29/Jul/2026:14:29:30 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.180, 194.5.48.180, 194.5.48.180, 194.5.48.180" 194.5.48.193 - - - 403 BYPASS - - [29/Jul/2026:14:29:30 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.193, 194.5.48.193, 194.5.48.193, 194.5.48.193" 194.5.48.194 - - - 403 BYPASS - - [29/Jul/2026:14:29:30 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.194, 194.5.48.194, 194.5.48.194, 194.5.48.194" 194.5.48.180 - - - 403 BYPASS - - [29/Jul/2026:14:29:30 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.180, 194.5.48.180, 194.5.48.180, 194.5.48.180" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:14:36:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785335800.6908628940582275390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 5.161.225.162 - - - 200 BYPASS - - [29/Jul/2026:14:36:41 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 5.161.225.162, 5.161.225.162, 5.161.225.162" 5.161.225.162 - - - 200 BYPASS - - [29/Jul/2026:14:36:43 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:08:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785337717.6359519958496093750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 103.75.185.95 - - - 200 BYPASS - - [29/Jul/2026:15:08:38 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.75.185.95, 103.75.185.95, 103.75.185.95, 103.75.185.95" 103.75.185.95 - - - 200 BYPASS - - [29/Jul/2026:15:08:40 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.75.185.95" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:19:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785338377.8206229209899902343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 91.92.47.153 - - - 404 MISS - - [29/Jul/2026:15:19:38 +0000] "GET /.env HTTP/1.1" 7198 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" "91.92.47.153, 91.92.47.153, 91.92.47.153, 91.92.47.153" 172.213.225.181 - - - 403 BYPASS - - [29/Jul/2026:15:23:49 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - - - 404 HIT - - [29/Jul/2026:15:23:51 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 432 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - - - 404 MISS - - [29/Jul/2026:15:23:52 +0000] "GET //aa.php HTTP/1.1" 433 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - - - 404 MISS - - [29/Jul/2026:15:23:53 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 433 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:53 +0000] "GET /media.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:54 +0000] "GET /images.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:55 +0000] "GET /gecko.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:55 +0000] "GET /82.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 HIT - - [29/Jul/2026:15:23:56 +0000] "GET /xstelth.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:57 +0000] "GET /xp.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:58 +0000] "GET ///admin.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FFDD5696A92F06720027C3603 - 404 MISS - - [29/Jul/2026:15:23:59 +0000] "GET /adminner.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FF9D5696A8BF0B71F02DB7303 - 404 MISS - - [29/Jul/2026:15:24:00 +0000] "GET //a.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FF9D5696A8BF0B71F02DB7303 - 404 MISS - - [29/Jul/2026:15:24:01 +0000] "GET /k.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC0D5696A8BF0B71F02967303 - 404 MISS - - [29/Jul/2026:15:24:03 +0000] "GET /aaa.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCBDA696A8BF0B71F02AA7803 - 404 MISS - - [29/Jul/2026:15:24:04 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB6DA696A92F0672002133903 - 404 MISS - - [29/Jul/2026:15:24:05 +0000] "GET /test.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB6DA696A92F0672002133903 - 404 MISS - - [29/Jul/2026:15:24:06 +0000] "GET /11.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB6DA696A92F0672002133903 - 404 HIT - - [29/Jul/2026:15:24:07 +0000] "GET /mac.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB6DA696A92F0672002133903 - 403 BYPASS - - [29/Jul/2026:15:24:08 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB6DA696A92F0672002133903 - 403 BYPASS - - [29/Jul/2026:15:24:08 +0000] "GET /wp-includes/Text/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB6DA696A92F0672002133903 - 404 MISS - - [29/Jul/2026:15:24:09 +0000] "GET /dr.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FEDD5696A8BF0B71F02D07303 - 404 MISS - - [29/Jul/2026:15:24:10 +0000] "GET /ops.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:11 +0000] "GET //wp-includes/assets/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:12 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 MISS - - [29/Jul/2026:15:24:13 +0000] "GET /.well-known/about.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 MISS - - [29/Jul/2026:15:24:14 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:14 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 BYPASS - - [29/Jul/2026:15:24:15 +0000] "GET /wp-admin/css/colour.php HTTP/1.1" 299 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 HIT - - [29/Jul/2026:15:24:16 +0000] "GET /8.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:17 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 MISS - - [29/Jul/2026:15:24:19 +0000] "GET //f6.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:20 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 MISS - - [29/Jul/2026:15:24:22 +0000] "GET /wp-blog.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 MISS - - [29/Jul/2026:15:24:24 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:26 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 403 BYPASS - - [29/Jul/2026:15:24:28 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCED5696A8BF0B71F02B57303 - 404 MISS - - [29/Jul/2026:15:24:32 +0000] "GET /f35.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:24:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785338674.2301149368286132812500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 172.213.225.181 - _uid=0100007FB1DA696A8BF0B71F026B7803 - 200 MISS - - [29/Jul/2026:15:24:34 +0000] "GET /wp-load.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB1DA696A8BF0B71F026B7803 - 404 MISS - - [29/Jul/2026:15:24:36 +0000] "GET /xyn.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB1DA696A8BF0B71F026B7803 - 404 MISS - - [29/Jul/2026:15:24:37 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB1DA696A8BF0B71F026B7803 - 404 MISS - - [29/Jul/2026:15:24:38 +0000] "GET /FWAZ.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC2D5696A8BF0B71F02997303 - 404 MISS - - [29/Jul/2026:15:24:39 +0000] "GET /file.php? HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC2D5696A8BF0B71F02997303 - 404 MISS - - [29/Jul/2026:15:24:40 +0000] "GET /file.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:41 +0000] "GET /ss.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:41 +0000] "GET /biufile.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:41 +0000] "GET /coffexium.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:42 +0000] "GET /als.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:42 +0000] "GET /simple.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:43 +0000] "GET /fpwch.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:43 +0000] "GET /info.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:44 +0000] "GET /11.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:44 +0000] "GET /dex.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 HIT - - [29/Jul/2026:15:24:45 +0000] "GET /1.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 403 BYPASS - - [29/Jul/2026:15:24:45 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:46 +0000] "GET /config.json.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FB5DA696A8BF0B71F02767803 - 404 MISS - - [29/Jul/2026:15:24:46 +0000] "GET /k2.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:47 +0000] "GET /for.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:48 +0000] "GET /raw.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:49 +0000] "GET //wp.php? HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:49 +0000] "GET /002.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:51 +0000] "GET /fffm.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:51 +0000] "GET //johen.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:52 +0000] "GET /nwflm.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:53 +0000] "GET /111.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 403 BYPASS - - [29/Jul/2026:15:24:53 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC1D5696A8BF0B71F02977303 - 404 MISS - - [29/Jul/2026:15:24:54 +0000] "GET /ws.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007F068A696A8BF0B71F026C1703 - 404 MISS - - [29/Jul/2026:15:24:55 +0000] "GET ///coffee.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007F068A696A8BF0B71F026C1703 - 404 MISS - - [29/Jul/2026:15:24:56 +0000] "GET /goods.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007F7C61696A92F0672002DA0403 - 404 MISS - - [29/Jul/2026:15:24:56 +0000] "GET /about.php? HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007F7C61696A92F0672002DA0403 - 404 HIT - - [29/Jul/2026:15:24:57 +0000] "GET /about.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007F7C61696A92F0672002DA0403 - 404 MISS - - [29/Jul/2026:15:24:57 +0000] "GET /admin.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FADDA696A8BF0B71F025D7803 - 404 MISS - - [29/Jul/2026:15:24:57 +0000] "GET //themes.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FADDA696A8BF0B71F025D7803 - 404 MISS - - [29/Jul/2026:15:24:58 +0000] "GET /wefile.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FD0D5696A8BF0B71F02BB7303 - 404 MISS - - [29/Jul/2026:15:24:58 +0000] "GET /inputs.php? HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FD0D5696A8BF0B71F02BB7303 - 404 MISS - - [29/Jul/2026:15:24:59 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC3DA696A92F0672002293903 - 404 MISS - - [29/Jul/2026:15:25:00 +0000] "GET //adminfuns.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC3DA696A92F0672002293903 - 404 MISS - - [29/Jul/2026:15:25:01 +0000] "GET /ssixta.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC3DA696A92F0672002293903 - 404 MISS - - [29/Jul/2026:15:25:02 +0000] "GET /hypo.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FC3DA696A92F0672002293903 - 404 MISS - - [29/Jul/2026:15:25:03 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCCDA696A8BF0B71F02AD7803 - 404 MISS - - [29/Jul/2026:15:25:05 +0000] "GET /xa.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCCDA696A8BF0B71F02AD7803 - 404 HIT - - [29/Jul/2026:15:25:05 +0000] "GET //av.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCCDA696A8BF0B71F02AD7803 - 404 HIT - - [29/Jul/2026:15:25:06 +0000] "GET /bthil.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCCDA696A8BF0B71F02AD7803 - 404 MISS - - [29/Jul/2026:15:25:07 +0000] "GET /geforce.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 172.213.225.181 - _uid=0100007FCCDA696A8BF0B71F02AD7803 - 404 MISS - - [29/Jul/2026:15:25:07 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:26:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785338762.9045488834381103515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 119.195.102.159 - - - 200 BYPASS - - [29/Jul/2026:15:26:03 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159" 119.195.102.159 - - - 200 BYPASS - - [29/Jul/2026:15:26:52 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159" 119.195.102.159 - _uid=0100007FBC1B6A6A8BF0B71F02EF9E03 - 200 BYPASS - - [29/Jul/2026:15:26:53 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:33:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785339214.7485830783843994140625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 3.7.204.22 - - - 200 BYPASS - - [29/Jul/2026:15:33:35 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "3.7.204.22, 3.7.204.22, 3.7.204.22, 3.7.204.22" 3.7.204.22 - - - 200 BYPASS - - [29/Jul/2026:15:33:37 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "3.7.204.22" 3.7.204.22 - _uid=0100007F511D6A6A8BF0B71F029F9F03 - 200 BYPASS - - [29/Jul/2026:15:33:38 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "3.7.204.22" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:48 +0000] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:48 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:37:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785339469.8667509555816650390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:50 +0000] "GET /assets/ HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:50 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:51 +0000] "GET /term.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:51 +0000] "GET /config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:15:37:51 +0000] "GET /wp-admin/classwithtostring.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:37:51 +0000] "GET /wp-good.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:52 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:52 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:52 +0000] "GET /x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:37:53 +0000] "GET /goods.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:53 +0000] "GET /wp-access.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:37:53 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:54 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:54 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:37:54 +0000] "GET /bthil.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:37:55 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:37:55 +0000] "GET /wp-admin/includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:55 +0000] "GET /cv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:37:56 +0000] "GET /wp-content/packed.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:56 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:15:37:56 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:57 +0000] "GET /core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:57 +0000] "GET /admin/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:57 +0000] "GET /admin/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:57 +0000] "GET /storage/rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:57 +0000] "GET /ahax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:58 +0000] "GET /zoom1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:37:58 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:37:59 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=b575981558 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 74.248.33.8 - - - 302 BYPASS - - [29/Jul/2026:15:37:59 +0000] "GET /wp-admin/network/ HTTP/1.1" 610 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:00 +0000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:00 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:01 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 BYPASS - - [29/Jul/2026:15:38:01 +0000] "GET /wp-admin/index.php HTTP/1.1" 609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:02 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:02 +0000] "GET /item.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:02 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:02 +0000] "GET /i.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:03 +0000] "GET /deepseek_d.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:03 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:03 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:04 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:04 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:04 +0000] "GET /assets/images/doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:05 +0000] "GET /bgymj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:05 +0000] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:06 +0000] "GET /images/ HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 200 HIT - - [29/Jul/2026:15:38:06 +0000] "GET /wp-load.php HTTP/1.1" 384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:06 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:07 +0000] "GET /a.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:07 +0000] "GET /u.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:07 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:38:07 +0000] "GET /wp-blog.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:08 +0000] "GET /xxx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:09 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:10 +0000] "GET /vendor/ HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:10 +0000] "GET /tool.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:10 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:38:11 +0000] "GET /k.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:11 +0000] "GET /root.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:38:11 +0000] "GET /ws.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:11 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:38:12 +0000] "GET /elp.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:12 +0000] "GET /a1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:12 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:13 +0000] "GET /alfa-rex.php7 HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:15:38:13 +0000] "GET /wp-admin/css/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:14 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:14 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:14 +0000] "GET /upload.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:15 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:15 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:15 +0000] "GET /wp-content/file.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:16 +0000] "GET /files.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:16 +0000] "GET /o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:16 +0000] "GET /file2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:17 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:17 +0000] "GET /xda.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:17 +0000] "GET /theme.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:17 +0000] "GET //classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:17 +0000] "GET /news.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:18 +0000] "GET /about/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 302 BYPASS - - [29/Jul/2026:15:38:19 +0000] "GET /wp-admin/user/ HTTP/1.1" 607 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:19 +0000] "GET /wp-includes/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:19 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:20 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:20 +0000] "GET /wp-conflg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:20 +0000] "GET /123.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:20 +0000] "GET /yanz.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 HIT - - [29/Jul/2026:15:38:21 +0000] "GET /autoload_classmap.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:21 +0000] "GET /bi.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:21 +0000] "GET /cc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:21 +0000] "GET /files/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:22 +0000] "GET /1.php7 HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:22 +0000] "GET /disagraeosc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:23 +0000] "GET /wp-logs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:15:38:23 +0000] "GET /wp-admin/css/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:23 +0000] "GET /system_log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:24 +0000] "GET /24.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:24 +0000] "GET /wp-admin/maint/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:24 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:25 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 7209 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:26 +0000] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 BYPASS - - [29/Jul/2026:15:38:26 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:26 +0000] "GET /num.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:27 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:28 +0000] "GET /wp-content/et-cache/ HTTP/1.1" 7198 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:28 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:28 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:29 +0000] "GET /gifclass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:29 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:29 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:30 +0000] "GET /css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 200 MISS - - [29/Jul/2026:15:38:30 +0000] "GET /wp-cron.php HTTP/1.1" 476 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:30 +0000] "GET /wp-block.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 404 MISS - - [29/Jul/2026:15:38:31 +0000] "GET /wp-includes/fonts/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 74.248.33.8 - - - 403 BYPASS - - [29/Jul/2026:15:38:31 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.8, 74.248.33.8, 74.248.33.8, 74.248.33.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:49:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785340156.8912999629974365234375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 85.11.167.5 - - - 200 BYPASS - - [29/Jul/2026:15:49:17 +0000] "GET /wp-login.php HTTP/1.1" 2558 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 85.11.167.5 - _uid=0100007FFD206A6A8BF0B71F0212A203 - 302 BYPASS - - [29/Jul/2026:15:49:18 +0000] "POST /wp-login.php HTTP/1.1" 1480 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 85.11.167.5 - - - 302 BYPASS - - [29/Jul/2026:15:49:19 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&action=confirm_admin_email&wp_lang=en_US HTTP/1.1" 797 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5" 85.11.167.5 - _uid=0100007FFF206A6A92F0672002AF4603 - 200 BYPASS - - [29/Jul/2026:15:49:20 +0000] "GET /wp-login.php HTTP/1.1" 6380 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5" 85.11.167.5 - - - 200 BYPASS - - [29/Jul/2026:15:49:21 +0000] "POST /wp-login.php HTTP/1.1" 3436 "https://redlightpain.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 37.27.122.165 - _uid=0100007F01216A6A8BF0B71F0214A203 - 200 BYPASS - - [29/Jul/2026:15:49:22 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=c4e4abbab3 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 85.11.167.5 - _uid=0100007F01216A6A8BF0B71F0214A203 - 500 BYPASS - - [29/Jul/2026:15:49:22 +0000] "GET /wp-admin/ HTTP/1.1" 3149 "www.google.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36" "85.11.167.5, 85.11.167.5, 85.11.167.5, 85.11.167.5" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:15:58:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785340695.5232000350952148437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 216.236.40.21 - - - 207 BYPASS - - [29/Jul/2026:15:58:16 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1248 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F18236A6A8BF0B71F026DA403 - 207 BYPASS - - [29/Jul/2026:15:58:17 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F18236A6A8BF0B71F026DA403 - 207 BYPASS - - [29/Jul/2026:15:58:19 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2084 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F18236A6A8BF0B71F026DA403 - 200 MISS - - [29/Jul/2026:15:58:20 +0000] "GET /?rest_route=%2Fwp%2Fv2%2Fposts&per_page=1&_fields=link HTTP/1.1" 801 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - - - 207 BYPASS - - [29/Jul/2026:15:58:21 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 6061 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:24 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2272 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:26 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2321 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:27 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2268 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:28 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2268 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:30 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2268 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:31 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 4902 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 207 BYPASS - - [29/Jul/2026:15:58:33 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 2174 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F1D236A6A8BF0B71F0272A403 - 200 MISS - - [29/Jul/2026:15:58:34 +0000] "GET /?rest_route=/ HTTP/1.1" 21382 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - - - 200 BYPASS - - [29/Jul/2026:15:58:35 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 216.236.40.21 - _uid=0100007F2B236A6A92F0672002684703 - 302 BYPASS - - [29/Jul/2026:15:58:36 +0000] "POST /wp-login.php HTTP/1.1" 1450 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 37.27.122.165 - _uid=0100007F2B236A6A92F0672002684703 - 200 BYPASS - - [29/Jul/2026:15:58:38 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=ce60223b12 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 216.236.40.21 - _uid=0100007F2B236A6A92F0672002684703 - 500 BYPASS - - [29/Jul/2026:15:58:38 +0000] "GET /wp-admin/plugin-install.php?tab=upload HTTP/1.1" 3149 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36" "216.236.40.21, 216.236.40.21, 216.236.40.21, 216.236.40.21" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:07:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785341245.6766810417175292968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 213.171.211.213 - - - 200 BYPASS - - [29/Jul/2026:16:07:26 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 213.171.211.213, 213.171.211.213, 213.171.211.213" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:16:12:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785341538.8504600524902343750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 98.98.200.184 - - - 200 BYPASS - - [29/Jul/2026:16:12:19 +0000] "POST /wp-login.php HTTP/1.1" 2680 "-" "Mozilla/5.0 (Linux; Android 12; SM-G991B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Mobile Safari/537.36" "98.98.200.184, 98.98.200.184, 98.98.200.184, 98.98.200.184" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:33 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:33 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 BYPASS - - [29/Jul/2026:16:12:33 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:33 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 403 BYPASS - - [29/Jul/2026:16:12:33 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:33 +0000] "GET /hqejjzso.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:33 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 BYPASS - - [29/Jul/2026:16:12:35 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 7211 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:36 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 7209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 BYPASS - - [29/Jul/2026:16:12:38 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 7200 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 45.88.186.250 - - - 404 MISS - - [29/Jul/2026:16:12:40 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 7209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "45.88.186.250, 45.88.186.250, 45.88.186.250, 45.88.186.250" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:00:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785344456.9342160224914550781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:17:00:57 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114" 72.167.132.114 - - - 200 BYPASS - - [29/Jul/2026:17:00:59 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114" 51.81.81.39 - - - 404 BYPASS - - [29/Jul/2026:17:07:15 +0000] "GET /wp-content/plugins/all-in-one-wp-migration/lib/view/assets/css/updater.min.css HTTP/1.1" 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36" "51.81.81.39, 51.81.81.39, 51.81.81.39, 51.81.81.39" 51.81.81.39 - - - 404 BYPASS - - [29/Jul/2026:17:07:16 +0000] "GET /wp-content/plugins/all-in-one-wp-migration/lib/view/assets/css/updater.min.css HTTP/1.1" 810 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "51.81.81.39" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:08:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785344892.3146429061889648437500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 185.104.44.167 - - - 200 BYPASS - - [29/Jul/2026:17:08:13 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.104.44.167, 185.104.44.167, 185.104.44.167, 185.104.44.167" 245.1.33.160 - - - 200 BYPASS - - [29/Jul/2026:17:08:47 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "245.1.33.160" 245.1.33.160 - _uid=0100007F9F336A6A8BF0B71F0253AF03 - 200 BYPASS - - [29/Jul/2026:17:08:47 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "245.1.33.160" 209.87.167.162 - - - 404 HIT - - [29/Jul/2026:17:17:29 +0000] "GET /.env HTTP/1.1" 7197 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" "209.87.167.162, 209.87.167.162, 209.87.167.162, 209.87.167.162" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:43:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785347039.3379600048065185546875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 65.98.12.160 - - - 200 BYPASS - - [29/Jul/2026:17:44:00 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.160, 65.98.12.160, 65.98.12.160, 65.98.12.160" 65.98.12.160 - - - 200 BYPASS - - [29/Jul/2026:17:44:22 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.160" 65.98.12.160 - _uid=0100007FF63B6A6A8BF0B71F02EDB403 - 200 BYPASS - - [29/Jul/2026:17:44:23 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.160" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:51:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785347475.7454938888549804687500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 154.38.175.180 - - - 200 BYPASS - - [29/Jul/2026:17:51:16 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 154.38.175.180, 154.38.175.180, 154.38.175.180" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.192 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.192, 194.5.48.192, 194.5.48.192, 194.5.48.192" 194.5.48.181 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.181, 194.5.48.181, 194.5.48.181, 194.5.48.181" 194.5.48.185 - - - 403 BYPASS - - [29/Jul/2026:17:51:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.185, 194.5.48.185, 194.5.48.185, 194.5.48.185" 194.5.48.182 - - - 403 BYPASS - - [29/Jul/2026:17:51:32 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.182, 194.5.48.182, 194.5.48.182, 194.5.48.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:17:57:45 +0000] "POST /wp-cron.php?doing_wp_cron=1785347864.8175830841064453125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 119.195.102.159 - - - 200 BYPASS - - [29/Jul/2026:17:57:45 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:18:52:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785351138.6258800029754638671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 103.119.15.169 - - - 207 BYPASS - - [29/Jul/2026:18:52:19 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 644 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 207 BYPASS - - [29/Jul/2026:18:52:20 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 207 BYPASS - - [29/Jul/2026:18:52:21 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 207 BYPASS - - [29/Jul/2026:18:52:22 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 499 BYPASS - - [29/Jul/2026:18:53:22 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 499 BYPASS - - [29/Jul/2026:18:54:24 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 499 BYPASS - - [29/Jul/2026:18:55:24 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 499 BYPASS - - [29/Jul/2026:18:56:26 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 499 BYPASS - - [29/Jul/2026:18:57:26 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "103.119.15.169" 103.119.15.169 - - - 499 BYPASS - - [29/Jul/2026:18:58:28 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "103.119.15.169" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:01:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785351678.0960960388183593750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:02:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785351740.1861200332641601562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:03:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785351800.4928779602050781250000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:04:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785351862.4445788860321044921875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:05:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785351922.5373289585113525390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:06:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785351984.5886819362640380859375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 194.5.48.203 - - - 403 BYPASS - - [29/Jul/2026:19:09:25 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.203, 194.5.48.203, 194.5.48.203, 194.5.48.203" 194.5.48.205 - - - 403 BYPASS - - [29/Jul/2026:19:09:25 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.205, 194.5.48.205, 194.5.48.205, 194.5.48.205" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:19:09:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.208 - - - 403 BYPASS - - [29/Jul/2026:19:09:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.208, 194.5.48.208, 194.5.48.208, 194.5.48.208" 194.5.48.202 - - - 403 BYPASS - - [29/Jul/2026:19:09:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.202, 194.5.48.202, 194.5.48.202, 194.5.48.202" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:19:09:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:19:09:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.200 - - - 403 BYPASS - - [29/Jul/2026:19:09:26 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.200, 194.5.48.200, 194.5.48.200, 194.5.48.200" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:23:18 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:18 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:18 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:19 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:19:23:19 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:19:23:19 +0000] "GET /augytwmh.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:23:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785352999.5620560646057128906250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:23:20 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 7211 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:19:23:20 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 491 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:19:23:20 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 7208 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 HIT - - [29/Jul/2026:19:23:21 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 7208 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:19:23:21 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 7200 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:39:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785353952.2409000396728515625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 119.195.102.159 - - - 200 BYPASS - - [29/Jul/2026:19:39:12 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "119.195.102.159, 119.195.102.159, 119.195.102.159, 119.195.102.159" 51.120.83.160 - - - 403 BYPASS - - [29/Jul/2026:19:40:35 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 404 MISS - - [29/Jul/2026:19:40:36 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F071B6A6A8BF0B71F02B39E03 - 404 MISS - - [29/Jul/2026:19:40:36 +0000] "GET /x.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F501E6A6A8BF0B71F02C4A003 - 404 MISS - - [29/Jul/2026:19:40:37 +0000] "GET /readme.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 404 MISS - - [29/Jul/2026:19:40:38 +0000] "GET /la.php HTTP/1.1" 433 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 404 MISS - - [29/Jul/2026:19:40:38 +0000] "GET /style.php HTTP/1.1" 433 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 404 MISS - - [29/Jul/2026:19:40:38 +0000] "GET /1.php HTTP/1.1" 433 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 404 MISS - - [29/Jul/2026:19:40:39 +0000] "GET /css.php HTTP/1.1" 433 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F541E6A6A92F0672002654603 - 404 MISS - - [29/Jul/2026:19:40:40 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F541E6A6A92F0672002654603 - 404 MISS - - [29/Jul/2026:19:40:40 +0000] "GET /alpha.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F541E6A6A92F0672002654603 - 404 MISS - - [29/Jul/2026:19:40:41 +0000] "GET /wp-2019.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F541E6A6A92F0672002654603 - 404 MISS - - [29/Jul/2026:19:40:42 +0000] "GET /db.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FA815696A6022FC3A0216D703 - 404 MISS - - [29/Jul/2026:19:40:43 +0000] "GET /403.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FBCDA696A8BF0B71F02817803 - 404 MISS - - [29/Jul/2026:19:40:44 +0000] "GET /ftde.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FBCDA696A8BF0B71F02817803 - 404 MISS - - [29/Jul/2026:19:40:45 +0000] "GET /edit.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FCDDA696A8BF0B71F02B17803 - 404 MISS - - [29/Jul/2026:19:40:46 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F521E6A6A8BF0B71F02CAA003 - 404 MISS - - [29/Jul/2026:19:40:47 +0000] "GET /radio.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5A1E6A6A8BF0B71F02D7A003 - 404 MISS - - [29/Jul/2026:19:40:48 +0000] "GET /.gitignore.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5A1E6A6A8BF0B71F02D7A003 - 404 MISS - - [29/Jul/2026:19:40:50 +0000] "GET /jga.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5A1E6A6A8BF0B71F02D7A003 - 404 MISS - - [29/Jul/2026:19:40:50 +0000] "GET /crgio.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5A1E6A6A8BF0B71F02D7A003 - 404 MISS - - [29/Jul/2026:19:40:51 +0000] "GET /wp-kikikoko.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5A1E6A6A8BF0B71F02D7A003 - 404 MISS - - [29/Jul/2026:19:40:52 +0000] "GET /r.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5F1E6A6A8BF0B71F02E6A003 - 404 MISS - - [29/Jul/2026:19:40:53 +0000] "GET /file.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5F1E6A6A8BF0B71F02E6A003 - 404 MISS - - [29/Jul/2026:19:40:53 +0000] "GET /ty.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 404 MISS - - [29/Jul/2026:19:40:54 +0000] "GET /as.php HTTP/1.1" 433 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FBCDA696A8BF0B71F02837803 - 404 MISS - - [29/Jul/2026:19:40:56 +0000] "GET /makeasmtp.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 37.27.122.165 - _uid=0100007F1367696A8BF0B71F02990B03 - 200 BYPASS - - [29/Jul/2026:19:40:58 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=b575981558 HTTP/1.1" 153 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:19:40:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785354058.3204710483551025390625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 51.120.83.160 - _uid=0100007F1367696A8BF0B71F02990B03 - 302 BYPASS - - [29/Jul/2026:19:40:58 +0000] "GET /wp-admin/about.php HTTP/1.1" 521 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - - - 200 BYPASS - - [29/Jul/2026:19:41:01 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2Fabout.php&reauth=1 HTTP/1.1" 8522 "-" "-" "51.120.83.160" 51.120.83.160 - _uid=0100007F1367696A8BF0B71F02990B03 - 404 MISS - - [29/Jul/2026:19:41:04 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F1367696A8BF0B71F02990B03 - 404 MISS - - [29/Jul/2026:19:41:05 +0000] "GET /m.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FADDA696A8BF0B71F025F7803 - 200 BYPASS - - [29/Jul/2026:19:41:06 +0000] "GET /wp-login.php HTTP/1.1" 2470 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FADDA696A8BF0B71F025F7803 - 404 MISS - - [29/Jul/2026:19:41:07 +0000] "GET /ava.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FADDA696A8BF0B71F025F7803 - 404 MISS - - [29/Jul/2026:19:41:08 +0000] "GET /plugins.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FBEDA696A8BF0B71F02867803 - 404 MISS - - [29/Jul/2026:19:41:09 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FBEDA696A8BF0B71F02867803 - 404 MISS - - [29/Jul/2026:19:41:09 +0000] "GET /log.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F1B67696A8BF0B71F02AD0B03 - 404 MISS - - [29/Jul/2026:19:41:10 +0000] "GET /w.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FACDA696A8BF0B71F025C7803 - 404 MISS - - [29/Jul/2026:19:41:11 +0000] "GET /alfa.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FACDA696A8BF0B71F025C7803 - 404 MISS - - [29/Jul/2026:19:41:12 +0000] "GET /cc.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F6D1E6A6A8BF0B71F0207A103 - 404 MISS - - [29/Jul/2026:19:41:13 +0000] "GET /moon.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F1D67696A8BF0B71F02B60B03 - 404 MISS - - [29/Jul/2026:19:41:14 +0000] "GET /shell.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FB1DA696A8BF0B71F026A7803 - 404 MISS - - [29/Jul/2026:19:41:15 +0000] "GET /config.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F4F1E6A6A8BF0B71F02BFA003 - 404 MISS - - [29/Jul/2026:19:41:16 +0000] "GET /mah.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FD2DA696A8BF0B71F02BF7803 - 404 MISS - - [29/Jul/2026:19:41:17 +0000] "GET /themes.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F018A696A8BF0B71F025D1703 - 404 MISS - - [29/Jul/2026:19:41:18 +0000] "GET /about.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F018A696A8BF0B71F025D1703 - 404 MISS - - [29/Jul/2026:19:41:19 +0000] "GET /wp.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F018A696A8BF0B71F025D1703 - 404 MISS - - [29/Jul/2026:19:41:20 +0000] "GET /uninstall.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F018A696A8BF0B71F025D1703 - 404 MISS - - [29/Jul/2026:19:41:23 +0000] "GET /echkm.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F018A696A8BF0B71F025D1703 - 404 MISS - - [29/Jul/2026:19:41:25 +0000] "GET /domvf.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F018A696A8BF0B71F025D1703 - 404 MISS - - [29/Jul/2026:19:41:27 +0000] "GET /item.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F5A1E6A6A8BF0B71F02D8A003 - 404 MISS - - [29/Jul/2026:19:41:29 +0000] "GET /elp.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007F641E6A6A92F06720027C4603 - 404 MISS - - [29/Jul/2026:19:41:31 +0000] "GET /404.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FAFDA696A8BF0B71F02667803 - 404 MISS - - [29/Jul/2026:19:41:32 +0000] "GET /resp.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 51.120.83.160 - _uid=0100007FAFDA696A8BF0B71F02667803 - 404 MISS - - [29/Jul/2026:19:41:33 +0000] "GET /login.php HTTP/1.1" 345 "-" "-" "51.120.83.160, 51.120.83.160, 51.120.83.160, 51.120.83.160" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.159 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.159, 194.5.48.159, 194.5.48.159, 194.5.48.159" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:19:47:03 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 91.116.106.71 - - - 403 BYPASS - - [29/Jul/2026:20:00:12 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "91.116.106.71, 91.116.106.71, 91.116.106.71, 91.116.106.71" 184.66.100.62 - - - 403 BYPASS - - [29/Jul/2026:20:00:13 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "184.66.100.62, 184.66.100.62, 184.66.100.62, 184.66.100.62" 14.229.25.244 - - - 403 BYPASS - - [29/Jul/2026:20:00:15 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "14.229.25.244, 14.229.25.244, 14.229.25.244, 14.229.25.244" 156.241.216.106 - - - 403 BYPASS - - [29/Jul/2026:20:00:17 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "156.241.216.106, 156.241.216.106, 156.241.216.106, 156.241.216.106" 93.44.188.8 - - - 403 BYPASS - - [29/Jul/2026:20:00:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "93.44.188.8, 93.44.188.8, 93.44.188.8, 93.44.188.8" 89.93.40.132 - - - 403 BYPASS - - [29/Jul/2026:20:00:19 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "89.93.40.132, 89.93.40.132, 89.93.40.132, 89.93.40.132" 188.3.221.200 - - - 403 BYPASS - - [29/Jul/2026:20:00:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "188.3.221.200, 188.3.221.200, 188.3.221.200, 188.3.221.200" 144.124.231.45 - - - 403 BYPASS - - [29/Jul/2026:20:00:20 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "144.124.231.45, 144.124.231.45, 144.124.231.45, 144.124.231.45" 171.97.101.79 - - - 403 BYPASS - - [29/Jul/2026:20:00:22 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "171.97.101.79, 171.97.101.79, 171.97.101.79, 171.97.101.79" 46.203.134.149 - - - 403 BYPASS - - [29/Jul/2026:20:00:23 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "46.203.134.149, 46.203.134.149, 46.203.134.149, 46.203.134.149" 92.209.187.220 - - - 403 BYPASS - - [29/Jul/2026:20:00:24 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "92.209.187.220, 92.209.187.220, 92.209.187.220, 92.209.187.220" 82.40.117.54 - - - 403 BYPASS - - [29/Jul/2026:20:00:25 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "82.40.117.54, 82.40.117.54, 82.40.117.54, 82.40.117.54" 156.241.242.249 - - - 403 BYPASS - - [29/Jul/2026:20:00:26 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "156.241.242.249, 156.241.242.249, 156.241.242.249, 156.241.242.249" 191.55.74.244 - - - 403 BYPASS - - [29/Jul/2026:20:00:28 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "191.55.74.244, 191.55.74.244, 191.55.74.244, 191.55.74.244" 45.178.0.33 - - - 403 BYPASS - - [29/Jul/2026:20:00:31 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "45.178.0.33, 45.178.0.33, 45.178.0.33, 45.178.0.33" 14.186.79.83 - - - 403 BYPASS - - [29/Jul/2026:20:00:33 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "14.186.79.83, 14.186.79.83, 14.186.79.83, 14.186.79.83" 102.38.104.245 - - - 403 BYPASS - - [29/Jul/2026:20:00:36 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "102.38.104.245, 102.38.104.245, 102.38.104.245, 102.38.104.245" 65.29.240.88 - - - 403 BYPASS - - [29/Jul/2026:20:00:37 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "65.29.240.88, 65.29.240.88, 65.29.240.88, 65.29.240.88" 105.97.64.247 - - - 403 BYPASS - - [29/Jul/2026:20:00:42 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "105.97.64.247, 105.97.64.247, 105.97.64.247, 105.97.64.247" 113.179.201.11 - - - 403 BYPASS - - [29/Jul/2026:20:00:44 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "113.179.201.11, 113.179.201.11, 113.179.201.11, 113.179.201.11" 94.240.28.175 - - - 403 BYPASS - - [29/Jul/2026:20:00:45 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "94.240.28.175, 94.240.28.175, 94.240.28.175, 94.240.28.175" 14.190.191.48 - - - 403 BYPASS - - [29/Jul/2026:20:00:47 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "14.190.191.48, 14.190.191.48, 14.190.191.48, 14.190.191.48" 190.45.150.127 - - - 403 BYPASS - - [29/Jul/2026:20:00:49 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "190.45.150.127, 190.45.150.127, 190.45.150.127, 190.45.150.127" 189.28.91.236 - - - 403 BYPASS - - [29/Jul/2026:20:00:52 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "189.28.91.236, 189.28.91.236, 189.28.91.236, 189.28.91.236" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:04:47 +0000] "POST /wp-cron.php?doing_wp_cron=1785355486.7282099723815917968750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 217.182.128.41 - - - 200 BYPASS - - [29/Jul/2026:20:04:47 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 217.182.128.41, 217.182.128.41, 217.182.128.41" 217.182.128.41 - - - 200 BYPASS - - [29/Jul/2026:20:05:04 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41" 65.98.12.160 - - - 200 BYPASS - - [29/Jul/2026:20:05:34 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.160, 65.98.12.160, 65.98.12.160, 65.98.12.160" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:05:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785355556.7496600151062011718750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 65.98.12.160 - - - 200 BYPASS - - [29/Jul/2026:20:05:57 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.160" 65.98.12.160 - _uid=0100007F255D6A6A8BF0B71F021FC203 - 200 BYPASS - - [29/Jul/2026:20:05:58 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.98.12.160" 142.114.92.97 - - - 403 BYPASS - - [29/Jul/2026:20:07:36 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "142.114.92.97, 142.114.92.97, 142.114.92.97, 142.114.92.97" 119.18.2.40 - - - 403 BYPASS - - [29/Jul/2026:20:07:38 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "119.18.2.40, 119.18.2.40, 119.18.2.40, 119.18.2.40" 181.14.228.151 - - - 403 BYPASS - - [29/Jul/2026:20:07:40 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "181.14.228.151, 181.14.228.151, 181.14.228.151, 181.14.228.151" 14.232.123.232 - - - 403 BYPASS - - [29/Jul/2026:20:07:43 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "14.232.123.232, 14.232.123.232, 14.232.123.232, 14.232.123.232" 176.45.61.64 - - - 403 BYPASS - - [29/Jul/2026:20:07:44 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "176.45.61.64, 176.45.61.64, 176.45.61.64, 176.45.61.64" 82.40.71.212 - - - 403 BYPASS - - [29/Jul/2026:20:07:45 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "82.40.71.212, 82.40.71.212, 82.40.71.212, 82.40.71.212" 181.67.181.13 - - - 403 BYPASS - - [29/Jul/2026:20:07:47 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "181.67.181.13, 181.67.181.13, 181.67.181.13, 181.67.181.13" 87.115.91.142 - - - 403 BYPASS - - [29/Jul/2026:20:07:48 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "87.115.91.142, 87.115.91.142, 87.115.91.142, 87.115.91.142" 179.60.66.156 - - - 403 BYPASS - - [29/Jul/2026:20:07:50 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "179.60.66.156, 179.60.66.156, 179.60.66.156, 179.60.66.156" 108.65.228.170 - - - 403 BYPASS - - [29/Jul/2026:20:07:51 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "108.65.228.170, 108.65.228.170, 108.65.228.170, 108.65.228.170" 66.186.91.218 - - - 403 BYPASS - - [29/Jul/2026:20:07:57 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "66.186.91.218, 66.186.91.218, 66.186.91.218, 66.186.91.218" 172.84.98.63 - - - 403 BYPASS - - [29/Jul/2026:20:07:58 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.84.98.63, 172.84.98.63, 172.84.98.63, 172.84.98.63" 157.10.248.115 - - - 403 BYPASS - - [29/Jul/2026:20:08:00 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "157.10.248.115, 157.10.248.115, 157.10.248.115, 157.10.248.115" 80.76.57.216 - - - 403 BYPASS - - [29/Jul/2026:20:08:01 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "80.76.57.216, 80.76.57.216, 80.76.57.216, 80.76.57.216" 212.119.51.220 - - - 403 BYPASS - - [29/Jul/2026:20:08:02 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "212.119.51.220, 212.119.51.220, 212.119.51.220, 212.119.51.220" 189.147.239.153 - - - 403 BYPASS - - [29/Jul/2026:20:08:03 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "189.147.239.153, 189.147.239.153, 189.147.239.153, 189.147.239.153" 88.175.174.69 - - - 403 BYPASS - - [29/Jul/2026:20:08:04 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "88.175.174.69, 88.175.174.69, 88.175.174.69, 88.175.174.69" 89.180.62.75 - - - 403 BYPASS - - [29/Jul/2026:20:08:05 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "89.180.62.75, 89.180.62.75, 89.180.62.75, 89.180.62.75" 45.239.132.191 - - - 403 BYPASS - - [29/Jul/2026:20:08:07 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "45.239.132.191, 45.239.132.191, 45.239.132.191, 45.239.132.191" 177.101.117.54 - - - 403 BYPASS - - [29/Jul/2026:20:08:08 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "177.101.117.54, 177.101.117.54, 177.101.117.54, 177.101.117.54" 190.145.240.13 - - - 403 BYPASS - - [29/Jul/2026:20:08:10 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "190.145.240.13, 190.145.240.13, 190.145.240.13, 190.145.240.13" 80.6.71.77 - - - 403 BYPASS - - [29/Jul/2026:20:08:11 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "80.6.71.77, 80.6.71.77, 80.6.71.77, 80.6.71.77" 186.156.171.151 - - - 403 BYPASS - - [29/Jul/2026:20:08:12 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "186.156.171.151, 186.156.171.151, 186.156.171.151, 186.156.171.151" 46.136.255.185 - - - 403 BYPASS - - [29/Jul/2026:20:08:14 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "46.136.255.185, 46.136.255.185, 46.136.255.185, 46.136.255.185" 47.160.123.158 - - - 403 BYPASS - - [29/Jul/2026:20:08:15 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "47.160.123.158, 47.160.123.158, 47.160.123.158, 47.160.123.158" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:08:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785355695.0384008884429931640625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:20:08:15 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54, 195.250.23.54, 195.250.23.54, 195.250.23.54" 14.224.16.247 - - - 403 BYPASS - - [29/Jul/2026:20:08:16 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "14.224.16.247, 14.224.16.247, 14.224.16.247, 14.224.16.247" 45.224.68.26 - - - 403 BYPASS - - [29/Jul/2026:20:08:18 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "45.224.68.26, 45.224.68.26, 45.224.68.26, 45.224.68.26" 83.245.49.191 - - - 403 BYPASS - - [29/Jul/2026:20:08:19 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "83.245.49.191, 83.245.49.191, 83.245.49.191, 83.245.49.191" 197.14.225.244 - - - 403 BYPASS - - [29/Jul/2026:20:08:25 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "197.14.225.244, 197.14.225.244, 197.14.225.244, 197.14.225.244" 92.209.158.195 - - - 403 BYPASS - - [29/Jul/2026:20:08:26 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "92.209.158.195, 92.209.158.195, 92.209.158.195, 92.209.158.195" 83.115.204.246 - - - 403 BYPASS - - [29/Jul/2026:20:08:27 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "83.115.204.246, 83.115.204.246, 83.115.204.246, 83.115.204.246" 46.203.40.136 - - - 403 BYPASS - - [29/Jul/2026:20:08:29 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "46.203.40.136, 46.203.40.136, 46.203.40.136, 46.203.40.136" 70.127.48.118 - - - 403 BYPASS - - [29/Jul/2026:20:08:31 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "70.127.48.118, 70.127.48.118, 70.127.48.118, 70.127.48.118" 182.8.122.156 - - - 403 BYPASS - - [29/Jul/2026:20:08:33 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "182.8.122.156, 182.8.122.156, 182.8.122.156, 182.8.122.156" 181.23.192.255 - - - 403 BYPASS - - [29/Jul/2026:20:08:34 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "181.23.192.255, 181.23.192.255, 181.23.192.255, 181.23.192.255" 195.250.23.54 - - - 200 BYPASS - - [29/Jul/2026:20:08:41 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.23.54" 67.175.156.71 - - - 403 BYPASS - - [29/Jul/2026:20:08:44 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "67.175.156.71, 67.175.156.71, 67.175.156.71, 67.175.156.71" 109.148.226.111 - - - 403 BYPASS - - [29/Jul/2026:20:08:45 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "109.148.226.111, 109.148.226.111, 109.148.226.111, 109.148.226.111" 66.103.49.195 - - - 403 BYPASS - - [29/Jul/2026:20:08:46 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "66.103.49.195, 66.103.49.195, 66.103.49.195, 66.103.49.195" 45.235.38.244 - - - 403 BYPASS - - [29/Jul/2026:20:08:48 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "45.235.38.244, 45.235.38.244, 45.235.38.244, 45.235.38.244" 142.116.79.108 - - - 403 BYPASS - - [29/Jul/2026:20:08:49 +0000] "POST /public/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "142.116.79.108, 142.116.79.108, 142.116.79.108, 142.116.79.108" 176.42.143.168 - - - 403 BYPASS - - [29/Jul/2026:20:08:50 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "176.42.143.168, 176.42.143.168, 176.42.143.168, 176.42.143.168" 91.92.210.80 - - - 403 BYPASS - - [29/Jul/2026:20:08:52 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "91.92.210.80, 91.92.210.80, 91.92.210.80, 91.92.210.80" 202.79.190.29 - - - 403 BYPASS - - [29/Jul/2026:20:08:54 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "202.79.190.29, 202.79.190.29, 202.79.190.29, 202.79.190.29" 72.56.166.244 - - - 403 BYPASS - - [29/Jul/2026:20:08:56 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "72.56.166.244, 72.56.166.244, 72.56.166.244, 72.56.166.244" 142.198.138.88 - - - 403 BYPASS - - [29/Jul/2026:20:08:57 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "142.198.138.88, 142.198.138.88, 142.198.138.88, 142.198.138.88" 185.187.78.52 - - - 403 BYPASS - - [29/Jul/2026:20:08:58 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "185.187.78.52, 185.187.78.52, 185.187.78.52, 185.187.78.52" 185.193.174.170 - - - 403 BYPASS - - [29/Jul/2026:20:09:00 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "185.193.174.170, 185.193.174.170, 185.193.174.170, 185.193.174.170" 62.169.72.217 - - - 403 BYPASS - - [29/Jul/2026:20:09:01 +0000] "POST /sito/xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "62.169.72.217, 62.169.72.217, 62.169.72.217, 62.169.72.217" 185.242.3.192 - - - 200 BYPASS - - [29/Jul/2026:20:13:04 +0000] "GET /txets.php HTTP/1.1" 241 "http://redlightpain.com/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192" 185.242.3.192 - - - 200 BYPASS - - [29/Jul/2026:20:13:08 +0000] "GET /wp-content/txets.php HTTP/1.1" 241 "http://redlightpain.com/wp-content/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192" 185.242.3.192 - - - 200 BYPASS - - [29/Jul/2026:20:13:12 +0000] "GET /wp-admin/txets.php HTTP/1.1" 241 "http://redlightpain.com/wp-admin/txets.php" "Go-http-client/2.0" "185.242.3.192, 185.242.3.192, 185.242.3.192, 185.242.3.192" 213.194.153.230 - - - 403 BYPASS - - [29/Jul/2026:20:16:28 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "213.194.153.230, 213.194.153.230, 213.194.153.230, 213.194.153.230" 70.51.70.78 - - - 403 BYPASS - - [29/Jul/2026:20:16:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "70.51.70.78, 70.51.70.78, 70.51.70.78, 70.51.70.78" 102.64.216.125 - - - 403 BYPASS - - [29/Jul/2026:20:16:31 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "102.64.216.125, 102.64.216.125, 102.64.216.125, 102.64.216.125" 14.171.226.159 - - - 403 BYPASS - - [29/Jul/2026:20:16:33 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "14.171.226.159, 14.171.226.159, 14.171.226.159, 14.171.226.159" 95.168.122.76 - - - 403 BYPASS - - [29/Jul/2026:20:16:34 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "95.168.122.76, 95.168.122.76, 95.168.122.76, 95.168.122.76" 179.191.148.84 - - - 403 BYPASS - - [29/Jul/2026:20:16:36 +0000] "POST /wp/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "179.191.148.84, 179.191.148.84, 179.191.148.84, 179.191.148.84" 75.190.37.173 - - - 403 BYPASS - - [29/Jul/2026:20:16:37 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "75.190.37.173, 75.190.37.173, 75.190.37.173, 75.190.37.173" 188.215.5.83 - - - 403 BYPASS - - [29/Jul/2026:20:16:38 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "188.215.5.83, 188.215.5.83, 188.215.5.83, 188.215.5.83" 156.230.238.77 - - - 403 BYPASS - - [29/Jul/2026:20:16:40 +0000] "POST /blog/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "156.230.238.77, 156.230.238.77, 156.230.238.77, 156.230.238.77" 41.157.160.41 - - - 403 BYPASS - - [29/Jul/2026:20:16:43 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "41.157.160.41, 41.157.160.41, 41.157.160.41, 41.157.160.41" 105.105.14.76 - - - 403 BYPASS - - [29/Jul/2026:20:16:45 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "105.105.14.76, 105.105.14.76, 105.105.14.76, 105.105.14.76" 45.226.227.240 - - - 403 BYPASS - - [29/Jul/2026:20:16:47 +0000] "POST /wordpress/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "45.226.227.240, 45.226.227.240, 45.226.227.240, 45.226.227.240" 88.65.121.120 - - - 403 BYPASS - - [29/Jul/2026:20:16:48 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "88.65.121.120, 88.65.121.120, 88.65.121.120, 88.65.121.120" 90.35.215.15 - - - 403 BYPASS - - [29/Jul/2026:20:16:49 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "90.35.215.15, 90.35.215.15, 90.35.215.15, 90.35.215.15" 179.6.47.43 - - - 403 BYPASS - - [29/Jul/2026:20:16:51 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "179.6.47.43, 179.6.47.43, 179.6.47.43, 179.6.47.43" 171.224.181.10 - - - 403 BYPASS - - [29/Jul/2026:20:16:52 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "171.224.181.10, 171.224.181.10, 171.224.181.10, 171.224.181.10" 98.48.1.55 - - - 403 BYPASS - - [29/Jul/2026:20:16:54 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "98.48.1.55, 98.48.1.55, 98.48.1.55, 98.48.1.55" 155.117.180.6 - - - 403 BYPASS - - [29/Jul/2026:20:16:55 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" "155.117.180.6, 155.117.180.6, 155.117.180.6, 155.117.180.6" 73.107.148.115 - - - 403 BYPASS - - [29/Jul/2026:20:16:56 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "73.107.148.115, 73.107.148.115, 73.107.148.115, 73.107.148.115" 104.250.204.65 - - - 403 BYPASS - - [29/Jul/2026:20:16:58 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36 Edg/132.0.0.0" "104.250.204.65, 104.250.204.65, 104.250.204.65, 104.250.204.65" 154.88.137.142 - - - 403 BYPASS - - [29/Jul/2026:20:17:00 +0000] "POST /xml/xmlrpc.php HTTP/1.1" 467 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "154.88.137.142, 154.88.137.142, 154.88.137.142, 154.88.137.142" 14.175.42.192 - - - 404 BYPASS - - [29/Jul/2026:20:17:03 +0000] "GET /xml/wp-login.php HTTP/1.1" 387 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "14.175.42.192, 14.175.42.192, 14.175.42.192, 14.175.42.192" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:17:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785356225.5645020008087158203125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 197.51.187.39 - - - 404 MISS - - [29/Jul/2026:20:17:06 +0000] "GET /xml/wp-login HTTP/1.1" 7198 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "197.51.187.39, 197.51.187.39, 197.51.187.39, 197.51.187.39" 89.131.17.73 - - - 404 BYPASS - - [29/Jul/2026:20:17:09 +0000] "GET /xml/wp-admin/ HTTP/1.1" 7211 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "89.131.17.73, 89.131.17.73, 89.131.17.73, 89.131.17.73" 38.19.250.109 - - - 404 BYPASS - - [29/Jul/2026:20:17:11 +0000] "GET /xml/wp-admin/index.php HTTP/1.1" 387 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "38.19.250.109, 38.19.250.109, 38.19.250.109, 38.19.250.109" 36.37.140.92 - - - 404 BYPASS - - [29/Jul/2026:20:17:13 +0000] "GET /xml/wp-login.php HTTP/1.1" 387 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "36.37.140.92, 36.37.140.92, 36.37.140.92, 36.37.140.92" 74.14.71.247 - - - 404 HIT - - [29/Jul/2026:20:17:15 +0000] "GET /xml/wp-login HTTP/1.1" 7197 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "74.14.71.247, 74.14.71.247, 74.14.71.247, 74.14.71.247" 14.191.247.122 - - - 404 BYPASS - - [29/Jul/2026:20:17:19 +0000] "GET /xml/wp-admin/ HTTP/1.1" 7211 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "14.191.247.122, 14.191.247.122, 14.191.247.122, 14.191.247.122" 113.178.16.199 - - - 404 BYPASS - - [29/Jul/2026:20:17:22 +0000] "GET /xml/wp-admin/index.php HTTP/1.1" 387 "https://redlightpain.com/xml" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "113.178.16.199, 113.178.16.199, 113.178.16.199, 113.178.16.199" 71.76.182.21 - - - 401 BYPASS - 9cd0ce4e35fa [29/Jul/2026:20:17:25 +0000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 913 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "71.76.182.21, 71.76.182.21, 71.76.182.21, 71.76.182.21" 187.36.8.134 - - - 401 BYPASS - 9cd0ce4e35fa [29/Jul/2026:20:17:27 +0000] "GET /wp-json/wp/v2/users/me HTTP/1.1" 913 "https://redlightpain.com/xmlrpc.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "187.36.8.134, 187.36.8.134, 187.36.8.134, 187.36.8.134" 194.5.48.180 - - - 403 BYPASS - - [29/Jul/2026:20:20:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.180, 194.5.48.180, 194.5.48.180, 194.5.48.180" 194.5.48.185 - - - 403 BYPASS - - [29/Jul/2026:20:20:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.185, 194.5.48.185, 194.5.48.185, 194.5.48.185" 194.5.48.193 - - - 403 BYPASS - - [29/Jul/2026:20:20:57 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.193, 194.5.48.193, 194.5.48.193, 194.5.48.193" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:20:20:59 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:20:20:59 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 194.5.48.193 - - - 403 BYPASS - - [29/Jul/2026:20:20:59 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.193, 194.5.48.193, 194.5.48.193, 194.5.48.193" 194.5.48.194 - - - 403 BYPASS - - [29/Jul/2026:20:20:59 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.194, 194.5.48.194, 194.5.48.194, 194.5.48.194" 194.5.48.182 - - - 403 BYPASS - - [29/Jul/2026:20:21:00 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.182, 194.5.48.182, 194.5.48.182, 194.5.48.182" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:30:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785357012.2675681114196777343750 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 104.166.189.248 - - - 200 BYPASS - - [29/Jul/2026:20:30:12 +0000] "POST /wp-login.php HTTP/1.1" 2680 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Mobile/15E148 Safari/604.1" "104.166.189.248, 104.166.189.248, 104.166.189.248, 104.166.189.248" 62.112.201.5 - - - 403 BYPASS - - [29/Jul/2026:20:36:54 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.0.0 Safari/537.36" "62.112.201.5, 62.112.201.5, 62.112.201.5, 62.112.201.5" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:40:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785357653.9696800708770751953125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 104.168.28.15 - - - 200 MISS - - [29/Jul/2026:20:40:54 +0000] "GET / HTTP/1.1" 7293 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.4" "104.168.28.15, 104.168.28.15, 104.168.28.15, 104.168.28.15" 104.168.28.15 - - - 404 BYPASS - - [29/Jul/2026:20:41:14 +0000] "GET /favicon.ico HTTP/1.1" 385 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/17.4" "104.168.28.15, 104.168.28.15, 104.168.28.15, 104.168.28.15" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:45:23 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=b575981558 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:45:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785357923.8657610416412353515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 216.250.119.94 - - - 302 BYPASS - - [29/Jul/2026:20:45:24 +0000] "GET /wp-admin/ HTTP/1.1" 600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - - - 200 BYPASS - - [29/Jul/2026:20:45:25 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 8513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F64666A6A8BF0B71F0210CB03 - 302 BYPASS - - [29/Jul/2026:20:45:26 +0000] "GET /wp-admin/ HTTP/1.1" 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - - - 200 BYPASS - - [29/Jul/2026:20:45:27 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1 HTTP/1.1" 8513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:27 +0000] "GET /wp-includes/css/dashicons.min.css?ver=6.9.1 HTTP/1.1" 59365 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:27 +0000] "GET /wp-admin/css/forms.min.css?ver=6.9.1 HTTP/1.1" 28783 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:27 +0000] "GET /wp-includes/css/buttons.min.css?ver=6.9.1 HTTP/1.1" 6421 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:27 +0000] "GET /wp-admin/css/login.min.css?ver=6.9.1 HTTP/1.1" 6741 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:27 +0000] "GET /wp-admin/css/l10n.min.css?ver=6.9.1 HTTP/1.1" 3559 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-includes/js/clipboard.min.js?ver=2.0.11 HTTP/1.1" 9383 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1" 87929 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1" 13952 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-includes/js/zxcvbn-async.min.js?ver=1.0 HTTP/1.1" 723 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-admin/images/wordpress-logo.svg?ver=20131107 HTTP/1.1" 1885 "https://redlightpain.us7.cdn-alpha.com/wp-admin/css/login.min.css?ver=6.9.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1" 6035 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:28 +0000] "GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1" 5688 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-admin/js/password-strength-meter.min.js?ver=6.9.1 HTTP/1.1" 1496 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-includes/js/underscore.min.js?ver=1.13.7 HTTP/1.1" 19280 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-includes/js/wp-util.min.js?ver=6.9.1 HTTP/1.1" 1799 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-includes/js/dist/dom-ready.min.js?ver=f77871ff7694fffea381 HTTP/1.1" 829 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-includes/js/dist/a11y.min.js?ver=cb460b4676c94bd228ed HTTP/1.1" 2585 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-admin/js/user-profile.min.js?ver=6.9.1 HTTP/1.1" 8371 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:29 +0000] "GET /wp-includes/js/zxcvbn.min.js HTTP/1.1" 822614 "https://redlightpain.us7.cdn-alpha.com/wp-login.php?redirect_to=https%3A%2F%2Fredlightpain.com%2Fwp-admin%2F&reauth=1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F64666A6A8BF0B71F0210CB03 - 302 BYPASS - - [29/Jul/2026:20:45:30 +0000] "GET /wp-admin/ HTTP/1.1" 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94, 216.250.119.94, 216.250.119.94, 216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 MISS - - [29/Jul/2026:20:45:34 +0000] "GET /wp-signup.php HTTP/1.1" 449 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:45:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785357936.1598360538482666015625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 MISS - - [29/Jul/2026:20:45:36 +0000] "GET /wp-activate.php HTTP/1.1" 442 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 MISS - - [29/Jul/2026:20:45:38 +0000] "GET /login HTTP/1.1" 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 MISS - - [29/Jul/2026:20:45:40 +0000] "GET /admin HTTP/1.1" 513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 BYPASS - - [29/Jul/2026:20:45:41 +0000] "GET /wp-admin/ HTTP/1.1" 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:45:44 +0000] "GET /signin HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:44 +0000] "GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9.1 HTTP/1.1" 119721 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:44 +0000] "GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.0.1 HTTP/1.1" 5491 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:44 +0000] "GET /wp-content/themes/hello-elementor/style.min.css?ver=3.0.1 HTTP/1.1" 6116 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.35.0 HTTP/1.1" 55027 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.0.1 HTTP/1.1" 7685 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/uploads/elementor/css/post-6.css?ver=1734639394 HTTP/1.1" 1646 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/css/view/general.min.css?ver=6.5.9 HTTP/1.1" 8106 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1742334746 HTTP/1.1" 110037 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1742312404 HTTP/1.1" 26191 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.min.js?ver=3.0.1 HTTP/1.1" 3310 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:45 +0000] "GET /wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js?ver=6.5.9 HTTP/1.1" 11994 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:46 +0000] "GET /wp-content/plugins/premium-addons-for-elementor/assets/frontend/min-js/elements-handler.min.js?ver=4.11.67 HTTP/1.1" 527 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 200 BYPASS - - [29/Jul/2026:20:45:46 +0000] "GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1" 23137 "https://redlightpain.us7.cdn-alpha.com/signin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:45:48 +0000] "GET /sign-in HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:45:50 +0000] "GET /my-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:45:53 +0000] "GET /secure-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:45:55 +0000] "GET /hidden-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:45:57 +0000] "GET /secret-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 BYPASS - - [29/Jul/2026:20:45:59 +0000] "GET /dashboard HTTP/1.1" 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 302 BYPASS - - [29/Jul/2026:20:46:00 +0000] "GET /wp-admin/ HTTP/1.1" 526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:03 +0000] "GET /portal HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:05 +0000] "GET /member HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:08 +0000] "GET /auth HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:10 +0000] "GET /access HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 BYPASS - - [29/Jul/2026:20:46:12 +0000] "GET /my-account HTTP/1.1" 29800 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:14 +0000] "GET /account HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:17 +0000] "GET /private HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:19 +0000] "GET /entrance HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:22 +0000] "GET /masuk HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:46:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785357984.3626489639282226562500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:25 +0000] "GET /log-in HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:27 +0000] "GET /login-page HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:30 +0000] "GET /wp-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:32 +0000] "GET /admin-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:35 +0000] "GET /backend HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:37 +0000] "GET /panel HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:40 +0000] "GET /enter HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:42 +0000] "GET /custom-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:44 +0000] "GET /site-login HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 216.250.119.94 - _uid=0100007F67666A6A92F06720023B5103 - 404 MISS - - [29/Jul/2026:20:46:47 +0000] "GET /manage HTTP/1.1" 29787 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "216.250.119.94" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:54:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785358448.8302559852600097656250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:20:54:09 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 198.38.94.87, 198.38.94.87, 198.38.94.87" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:20:54:29 +0000] "GET /wp-login.php HTTP/1.1" 6468 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87" 198.38.94.87 - _uid=0100007F85686A6A8BF0B71F02F2CC03 - 200 BYPASS - - [29/Jul/2026:20:54:30 +0000] "POST /wp-login.php HTTP/1.1" 6824 "https://redlightpain.us7.cdn-alpha.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:20:55:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785358542.5613811016082763671875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 160.191.139.115 - - - 200 BYPASS - - [29/Jul/2026:20:55:43 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "160.191.139.115, 160.191.139.115, 160.191.139.115, 160.191.139.115" 194.5.48.198 - - - 403 BYPASS - - [29/Jul/2026:21:01:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.198, 194.5.48.198, 194.5.48.198, 194.5.48.198" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:21:01:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.196 - - - 403 BYPASS - - [29/Jul/2026:21:01:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.196, 194.5.48.196, 194.5.48.196, 194.5.48.196" 194.5.48.207 - - - 403 BYPASS - - [29/Jul/2026:21:01:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.207, 194.5.48.207, 194.5.48.207, 194.5.48.207" 194.5.48.207 - - - 403 BYPASS - - [29/Jul/2026:21:01:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.207, 194.5.48.207, 194.5.48.207, 194.5.48.207" 194.5.48.201 - - - 403 BYPASS - - [29/Jul/2026:21:01:18 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.201, 194.5.48.201, 194.5.48.201, 194.5.48.201" 194.5.48.202 - - - 403 BYPASS - - [29/Jul/2026:21:01:19 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.202, 194.5.48.202, 194.5.48.202, 194.5.48.202" 194.5.48.201 - - - 403 BYPASS - - [29/Jul/2026:21:01:21 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.201, 194.5.48.201, 194.5.48.201, 194.5.48.201" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:57 +0000] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 467 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:04:57 +0000] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 492 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:57 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:58 +0000] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.102 Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:04:58 +0000] "POST /wp-plain.php HTTP/1.1" 376 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 403 BYPASS - - [29/Jul/2026:21:04:58 +0000] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 467 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:04:58 +0000] "GET /dixjggok.php?Fox=d3wL7 HTTP/1.1" 492 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:04:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785359099.0278739929199218750000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:04:59 +0000] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 7211 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:05:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785359099.5814390182495117187500 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:05:00 +0000] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 7209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 MISS - - [29/Jul/2026:21:05:01 +0000] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 7209 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 64.89.163.68 - - - 404 BYPASS - - [29/Jul/2026:21:05:03 +0000] "POST /alfacgiapi/perl.alfa HTTP/1.1" 7200 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" "64.89.163.68, 64.89.163.68, 64.89.163.68, 64.89.163.68" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:21:36:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785361018.0645949840545654296875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 104.43.50.80 - - - 200 BYPASS - - [29/Jul/2026:21:36:58 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "104.43.50.80, 104.43.50.80, 104.43.50.80, 104.43.50.80" 194.5.48.180 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.180, 194.5.48.180, 194.5.48.180, 194.5.48.180" 194.5.48.193 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.193, 194.5.48.193, 194.5.48.193, 194.5.48.193" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.191 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.191, 194.5.48.191, 194.5.48.191, 194.5.48.191" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 194.5.48.176 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.176, 194.5.48.176, 194.5.48.176, 194.5.48.176" 194.5.48.193 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.193, 194.5.48.193, 194.5.48.193, 194.5.48.193" 194.5.48.186 - - - 403 BYPASS - - [29/Jul/2026:21:37:11 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.186, 194.5.48.186, 194.5.48.186, 194.5.48.186" 51.195.244.84 - - - 200 BYPASS - - [29/Jul/2026:21:38:16 +0000] "GET /robots.txt HTTP/1.1" 227 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "51.195.244.84" 51.161.37.185 - - - 200 BYPASS - - [29/Jul/2026:21:38:18 +0000] "GET /sitemap_index.xml HTTP/1.1" 225 "-" "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)" "51.161.37.185" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.173 - - - 403 BYPASS - - [29/Jul/2026:22:12:29 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.173, 194.5.48.173, 194.5.48.173, 194.5.48.173" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:44:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785365099.3501529693603515625000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:00 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 644 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:00 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:01 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 207 BYPASS - - [29/Jul/2026:22:45:02 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1477 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:46:02 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:47:04 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:48:05 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:49:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:50:07 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 153.75.81.186 - - - 499 BYPASS - - [29/Jul/2026:22:51:09 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 0 "-" "Mozilla/5.0" "153.75.81.186, 153.75.81.186, 153.75.81.186, 153.75.81.186" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:53:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785365638.4329040050506591796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:55:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785365700.5068318843841552734375 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:56:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785365760.5911068916320800781250 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:57:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785365822.7037670612335205078125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:58:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785365882.7438220977783203125000 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:22:59:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785365944.8093230724334716796875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:13:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785366781.5355288982391357421875 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 74.7.230.8 - - - 200 MISS - - [29/Jul/2026:23:13:02 +0000] "GET /robots.txt HTTP/1.1" 565 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" "74.7.230.8" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:17:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785367075.4406359195709228515625 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 65.60.36.230 - - - 200 BYPASS - - [29/Jul/2026:23:17:56 +0000] "GET /wp-login.php HTTP/1.1" 2558 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.60.36.230, 65.60.36.230, 65.60.36.230, 65.60.36.230" 65.60.36.230 - - - 200 BYPASS - - [29/Jul/2026:23:18:02 +0000] "POST /wp-login.php HTTP/1.1" 6839 "https://redlightpain.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "65.60.36.230" 194.5.48.170 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.170, 194.5.48.170, 194.5.48.170, 194.5.48.170" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.167 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.167, 194.5.48.167, 194.5.48.167, 194.5.48.167" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 194.5.48.162 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.162, 194.5.48.162, 194.5.48.162, 194.5.48.162" 194.5.48.160 - - - 403 BYPASS - - [29/Jul/2026:23:20:01 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.160, 194.5.48.160, 194.5.48.160, 194.5.48.160" 194.5.48.164 - - - 403 BYPASS - - [29/Jul/2026:23:20:02 +0000] "POST /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "194.5.48.164, 194.5.48.164, 194.5.48.164, 194.5.48.164" 37.27.122.165 - - - 200 BYPASS - - [29/Jul/2026:23:33:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785367991.5498459339141845703125 HTTP/1.1" 241 "-" "WordPress/6.9.1; https://redlightpain.us7.cdn-alpha.com" "37.27.122.165" 74.7.227.54 - - - 200 MISS - - [29/Jul/2026:23:33:12 +0000] "GET / HTTP/1.1" 31419 "https://redlightpain.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:14 +0000] "GET /x-4/ HTTP/1.1" 33367 "https://redlightpain.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:16 +0000] "GET /x-5/ HTTP/1.1" 33367 "https://redlightpain.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:18 +0000] "GET /x-7/ HTTP/1.1" 33367 "https://redlightpain.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:21 +0000] "GET /x-6/ HTTP/1.1" 33367 "https://redlightpain.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:29 +0000] "GET /comments/feed/ HTTP/1.1" 2168 "https://redlightpain.us7.cdn-alpha.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:30 +0000] "GET /hello-world/ HTTP/1.1" 37436 "https://redlightpain.us7.cdn-alpha.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 301 MISS - - [29/Jul/2026:23:33:31 +0000] "GET /?p=299 HTTP/1.1" 325 "https://redlightpain.us7.cdn-alpha.com/x-4/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 301 MISS - - [29/Jul/2026:23:33:32 +0000] "GET /?p=310 HTTP/1.1" 325 "https://redlightpain.us7.cdn-alpha.com/x-5/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 301 MISS - - [29/Jul/2026:23:33:33 +0000] "GET /?p=321 HTTP/1.1" 325 "https://redlightpain.us7.cdn-alpha.com/x-7/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 301 MISS - - [29/Jul/2026:23:33:34 +0000] "GET /?p=316 HTTP/1.1" 325 "https://redlightpain.us7.cdn-alpha.com/x-6/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 MISS - - [29/Jul/2026:23:33:35 +0000] "GET /feed/ HTTP/1.1" 8892 "https://redlightpain.us7.cdn-alpha.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:36 +0000] "GET /wp-json/wp/v2/posts/316 HTTP/1.1" 3183 "https://redlightpain.us7.cdn-alpha.com/x-6/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:37 +0000] "GET /wp-json/wp/v2/posts/310 HTTP/1.1" 3183 "https://redlightpain.us7.cdn-alpha.com/x-5/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:38 +0000] "GET /wp-json/wp/v2/posts/321 HTTP/1.1" 3183 "https://redlightpain.us7.cdn-alpha.com/x-7/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:39 +0000] "GET /wp-json/wp/v2/posts/299 HTTP/1.1" 3183 "https://redlightpain.us7.cdn-alpha.com/x-4/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:40 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-4%2F HTTP/1.1" 2798 "https://redlightpain.us7.cdn-alpha.com/x-4/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 301 MISS - - [29/Jul/2026:23:33:41 +0000] "GET /?p=1 HTTP/1.1" 396 "https://redlightpain.us7.cdn-alpha.com/hello-world/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:42 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-5%2F HTTP/1.1" 2798 "https://redlightpain.us7.cdn-alpha.com/x-5/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:43 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-7%2F HTTP/1.1" 2798 "https://redlightpain.us7.cdn-alpha.com/x-7/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:44 +0000] "GET /wp-json/oembed/1.0/embed?url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-6%2F HTTP/1.1" 2798 "https://redlightpain.us7.cdn-alpha.com/x-6/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:46 +0000] "GET /wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-4%2F HTTP/1.1" 2919 "https://redlightpain.us7.cdn-alpha.com/x-4/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:47 +0000] "GET /wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-5%2F HTTP/1.1" 2919 "https://redlightpain.us7.cdn-alpha.com/x-5/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:48 +0000] "GET /wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-6%2F HTTP/1.1" 2919 "https://redlightpain.us7.cdn-alpha.com/x-6/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54" 74.7.227.54 - _uid=0100007FB78D6A6A8BF0B71F0287E903 - 200 BYPASS - - [29/Jul/2026:23:33:49 +0000] "GET /wp-json/oembed/1.0/embed?format=xml&url=https%3A%2F%2Fredlightpain.us7.cdn-alpha.com%2Fx-7%2F HTTP/1.1" 2919 "https://redlightpain.us7.cdn-alpha.com/x-7/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" "74.7.227.54"
修改文件时间
将文件时间修改为当前时间的前一年
删除文件