File: //home/httpd/logs/melissaober.com_access_log.4
43.153.135.208 - - [27/Jan/2026:05:12:42 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
62.171.172.110 - - [27/Jan/2026:05:26:47 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
62.171.172.110 - - [27/Jan/2026:05:26:48 -0500] "GET /wp-json/wc/v3 HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
62.171.172.110 - - [27/Jan/2026:05:26:49 -0500] "GET /index.php?route=checkout/cart HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
62.171.172.110 - - [27/Jan/2026:05:26:49 -0500] "GET /wp-json/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
62.171.172.110 - - [27/Jan/2026:05:26:50 -0500] "GET /wp-login.php?action=register HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36"
77.111.244.182 - - [27/Jan/2026:05:40:29 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.2 Mobile/15E148 Safari/604.1 OPT/6.3.0"
185.6.9.148 - - [27/Jan/2026:05:48:04 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786"
198.235.24.96 - - [27/Jan/2026:05:54:20 -0500] "GET / HTTP/1.1" 302 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
3.20.201.240 - - [27/Jan/2026:05:54:34 -0500] "GET / HTTP/1.1" 302 - "-" "air.ai/scanning Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Chrome/126.0.0.0 Safari/537.36"
13.74.146.113 - - [27/Jan/2026:08:14:25 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:26 -0500] "GET /baixy.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:26 -0500] "GET /bgymj.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:26 -0500] "GET /nf.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:27 -0500] "GET /davaa.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:27 -0500] "GET /ceiif.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:27 -0500] "GET /sst.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:27 -0500] "GET /class-db.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:27 -0500] "GET /tmpls.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:28 -0500] "GET /ver.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:28 -0500] "GET /ultra.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:28 -0500] "GET /pro.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:28 -0500] "GET /wp-good.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:29 -0500] "GET /e.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:29 -0500] "GET /data.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:29 -0500] "GET /abcd.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:29 -0500] "GET /z.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:30 -0500] "GET /css.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:30 -0500] "GET /image.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:30 -0500] "GET /file22.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:30 -0500] "GET /check.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:31 -0500] "GET /wp-header-json.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:31 -0500] "GET /fm.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:31 -0500] "GET /1.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:31 -0500] "GET /ws.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:31 -0500] "GET /xxxx.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:32 -0500] "GET /wp-configs.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:32 -0500] "GET /xmlrpc.php HTTP/1.1" 403 282 "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:32 -0500] "GET /file56.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:32 -0500] "GET /990.php HTTP/1.1" 302 - "-" "-"
13.74.146.113 - - [27/Jan/2026:08:14:33 -0500] "GET /error.php HTTP/1.1" 302 - "-" "-"
43.155.162.41 - - [27/Jan/2026:08:33:30 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
120.71.59.24 - - [27/Jan/2026:09:50:13 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.130.102.7 - - [27/Jan/2026:11:04:17 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
202.76.171.31 - - [27/Jan/2026:11:54:56 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; en-US) AppleWebKit/534.2 (KHTML, like Gecko) Chrome/6.0.453.1 Safari/534.2"
166.181.86.152 - - [27/Jan/2026:11:58:26 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/144.0.7559.95 Mobile/15E148 Safari/604.1"
74.7.175.143 - - [27/Jan/2026:13:01:21 -0500] "GET /robots.txt HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
4.241.184.25 - - [27/Jan/2026:13:01:28 -0500] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:29 -0500] "GET //autoload_classmap.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:30 -0500] "GET //alfa.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:30 -0500] "GET //wp-includes/assets/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:30 -0500] "GET /luxe.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:31 -0500] "GET /update/wpupex.php/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:31 -0500] "GET /rezor.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:32 -0500] "GET //doc.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:32 -0500] "GET //wp-admin/user/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:32 -0500] "GET //wp-includes/css/about.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:33 -0500] "GET //install.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:33 -0500] "GET /~norapump/hah.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:33 -0500] "GET /sto.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:34 -0500] "GET //x.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:34 -0500] "GET //test.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:34 -0500] "GET /wp-includes/blocks/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:35 -0500] "GET /n3.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:35 -0500] "GET /wp-admin/install.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:35 -0500] "GET /o.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:36 -0500] "GET //wp-includes/ID3/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:36 -0500] "GET /class-t.api.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:37 -0500] "GET /.trash7309/f/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:37 -0500] "GET //wp.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:37 -0500] "GET //wp-includes/customize/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:38 -0500] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:38 -0500] "GET //h.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:38 -0500] "GET //skin/install/default/security.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:39 -0500] "GET /wrt.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:39 -0500] "GET //wp-content/plugins/Core-EconX/up.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:39 -0500] "GET /wp-includes/css/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:40 -0500] "GET /images/c99.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:40 -0500] "GET /png.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:40 -0500] "GET //wp-includes/ID3/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:41 -0500] "GET //zwso.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:41 -0500] "GET //wp-content/languages/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:42 -0500] "GET //wp-content/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:42 -0500] "GET /wp/wp-includes//index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:42 -0500] "GET /ton.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:43 -0500] "GET //wso.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:43 -0500] "GET /images/fk2e3/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:43 -0500] "GET /a2.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:44 -0500] "GET /shell.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:44 -0500] "GET /wp-includes/IXR/moon.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:44 -0500] "GET /sxo.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:45 -0500] "GET //admin.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:45 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:46 -0500] "GET //wp-content/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:46 -0500] "GET /mans.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:46 -0500] "GET //dropdown.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:47 -0500] "GET /WordPress/x/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:47 -0500] "GET /ze.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:47 -0500] "GET //geck.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:48 -0500] "GET /menu.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:48 -0500] "GET //admin/function.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:48 -0500] "GET //index/function.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:49 -0500] "GET /flower.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:49 -0500] "GET /ftp.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:49 -0500] "GET /mds.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:50 -0500] "GET /ahax.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:50 -0500] "GET //wp-admin/class-db.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:51 -0500] "GET /cool.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:51 -0500] "GET /gm.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:51 -0500] "GET //simple.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:52 -0500] "GET //elp.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:52 -0500] "GET /bolt.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:52 -0500] "GET //wp-content/uploads/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:53 -0500] "GET //inputs.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:53 -0500] "GET /.trash7309/fafa/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:54 -0500] "GET /system.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:54 -0500] "GET /wp-admin/maint/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:54 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:55 -0500] "GET /museu/yhweq.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:55 -0500] "GET /an.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:55 -0500] "GET //w.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:56 -0500] "GET /gmo.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:56 -0500] "GET /gib.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:56 -0500] "GET /wp-miiss.php.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:57 -0500] "GET /ho/wpup.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:57 -0500] "GET //moon.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:57 -0500] "GET /filesss.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:58 -0500] "GET /hey.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:58 -0500] "GET //wp-content/themes/seotheme/mar.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:59 -0500] "GET //1337.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:59 -0500] "GET //buy.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:01:59 -0500] "GET /apsarasarts/okk.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:00 -0500] "GET /m.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:00 -0500] "GET /wp-is.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:00 -0500] "GET /jmfi2.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:01 -0500] "GET //about/function.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:01 -0500] "GET /bnn_.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:02 -0500] "GET //wp-content/json.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:02 -0500] "GET /hzz.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:02 -0500] "GET //shell20211028.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:03 -0500] "GET //content.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:03 -0500] "GET /wp-content/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:03 -0500] "GET /ps.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:04 -0500] "GET //wp-content/themes/about.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:04 -0500] "GET /.trash7309/dd/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:04 -0500] "GET /cache.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:05 -0500] "GET /ss.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:05 -0500] "GET /p.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:06 -0500] "GET //wp-content/plugins/achdxhv/languages/admin.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:07 -0500] "GET //user.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:07 -0500] "GET /wp-includes/block-patterns/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:07 -0500] "GET //index/function.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:08 -0500] "GET /wp.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:08 -0500] "GET /rip.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:09 -0500] "GET /wp4.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:09 -0500] "GET //403.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:09 -0500] "GET //wp-admin/maint/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:10 -0500] "GET /asd67.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:10 -0500] "GET //sad/about.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:10 -0500] "GET /oivcl.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:11 -0500] "GET //about.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:11 -0500] "GET //wp-content/themes/deeto/login.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:11 -0500] "GET /v2.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:12 -0500] "GET //wp-content/themes/hideo/network.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:12 -0500] "GET /x/ HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:13 -0500] "GET //.cache/x.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:13 -0500] "GET /dr.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:13 -0500] "GET /raw.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:14 -0500] "GET //wp-includes/css/about.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:14 -0500] "GET //wp-content/index.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:14 -0500] "GET /ioxi-o2.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:15 -0500] "GET /dropdown.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:15 -0500] "GET /dlu.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:15 -0500] "GET //wp-content/about.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:16 -0500] "GET /db.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:16 -0500] "GET /packed.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:16 -0500] "GET /wp-configs.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:17 -0500] "GET //404.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:17 -0500] "GET /des.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:18 -0500] "GET /.well-known/content.php HTTP/1.1" 302 - "-" "-"
4.241.184.25 - - [27/Jan/2026:13:02:18 -0500] "GET //lufix.php HTTP/1.1" 302 - "-" "-"
179.125.163.243 - - [27/Jan/2026:13:19:49 -0500] "POST /xmlrpc.php HTTP/1.1" 403 278 "-" "Mozilla/5.0 (Windows NT 6.2; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/95.0.0.0 Safari/537.36"
74.7.241.184 - - [27/Jan/2026:14:03:08 -0500] "GET /robots.txt HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
20.78.154.48 - - [27/Jan/2026:14:20:21 -0500] "GET /.well-known/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:21 -0500] "GET /1.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:21 -0500] "GET /admin.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:21 -0500] "GET /13.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:22 -0500] "GET /222.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:22 -0500] "GET /aa.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:22 -0500] "GET /abcd.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:22 -0500] "GET /about.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:22 -0500] "GET /admin.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:23 -0500] "GET /adminfuns.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:23 -0500] "GET /adminfuns.php/.well-known/acme-challenge/file.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:23 -0500] "GET /ae.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:23 -0500] "GET /akcc.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:24 -0500] "GET /assets/images/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:24 -0500] "GET /assets/images/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:24 -0500] "GET /bak.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:24 -0500] "GET /bless.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:24 -0500] "GET /cc.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:25 -0500] "GET /cgi-bin/ HTTP/1.1" 403 276 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:25 -0500] "GET /chosen.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:25 -0500] "GET /classwithtostring.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:25 -0500] "GET /css/admin.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:25 -0500] "GET /doc.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:26 -0500] "GET /edit.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:26 -0500] "GET /elp.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:26 -0500] "GET /file.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:26 -0500] "GET /files.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:27 -0500] "GET /gecko.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:27 -0500] "GET /goods.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:27 -0500] "GET /inputs.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:27 -0500] "GET /ioxi-o.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:27 -0500] "GET /k.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:28 -0500] "GET /man.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:28 -0500] "GET /new.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:28 -0500] "GET /num.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:28 -0500] "GET /private/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:29 -0500] "GET /profile.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:29 -0500] "GET /server.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:29 -0500] "GET /shell.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:29 -0500] "GET /t.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:29 -0500] "GET /themes.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:30 -0500] "GET /wa/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:30 -0500] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:30 -0500] "GET /wp-admin/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:30 -0500] "GET /wp-admin/class-db.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:31 -0500] "GET /wp-admin/css/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:31 -0500] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:31 -0500] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:31 -0500] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:31 -0500] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:32 -0500] "GET /wp-admin/images/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:32 -0500] "GET /wp-admin/images/file.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:32 -0500] "GET /wp-admin/includes/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:32 -0500] "GET /wp-admin/js/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:33 -0500] "GET /wp-admin/js/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:33 -0500] "GET /wp-admin/js/widgets/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:33 -0500] "GET /wp-admin/network/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:33 -0500] "GET /wp-admin/product.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:33 -0500] "GET /wp-content/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:34 -0500] "GET /wp-content/languages/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:34 -0500] "GET /wp-content/plugins/admin.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:34 -0500] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:34 -0500] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:34 -0500] "GET /wp-content/themes/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:35 -0500] "GET /wp-content/themes/admin.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:35 -0500] "GET /wp-content/upgrade/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:35 -0500] "GET /wp-content/uploads/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:35 -0500] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:36 -0500] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:36 -0500] "GET /wp-includes/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:36 -0500] "GET /wp-includes/ID3/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:36 -0500] "GET /wp-includes/ID3/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:36 -0500] "GET /wp-includes/IXR/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:37 -0500] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:37 -0500] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:37 -0500] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:37 -0500] "GET /wp-includes/block-bindings/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:37 -0500] "GET /wp-includes/block-bindings/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:38 -0500] "GET /wp-includes/block-supports/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:38 -0500] "GET /wp-includes/blocks/comments/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:38 -0500] "GET /wp-includes/blocks/gallery/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:38 -0500] "GET /wp-includes/css/dist/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:39 -0500] "GET /wp-includes/customize/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:39 -0500] "GET /wp-includes/fonts/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:39 -0500] "GET /wp-includes/fonts/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:39 -0500] "GET /wp-includes/html-api/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:39 -0500] "GET /wp-includes/images/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:40 -0500] "GET /wp-includes/index.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:40 -0500] "GET /wp-includes/rest-api/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:40 -0500] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:40 -0500] "GET /wp-includes/theme-compat/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:40 -0500] "GET /wp-trackback.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:41 -0500] "GET /www.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:41 -0500] "GET /xmlrpc.php HTTP/1.1" 403 278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.78.154.48 - - [27/Jan/2026:14:20:41 -0500] "GET /xmrlpc.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
43.135.145.117 - - [27/Jan/2026:14:30:20 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
84.239.41.39 - - [27/Jan/2026:14:36:50 -0500] "GET /robots.txt HTTP/1.1" 406 331 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:36:55 -0500] "GET / HTTP/1.1" 406 321 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:36:55 -0500] "GET /robots.txt HTTP/1.1" 406 330 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:36:56 -0500] "GET / HTTP/1.1" 406 320 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:36:58 -0500] "GET / HTTP/1.1" 406 321 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:36:59 -0500] "GET / HTTP/1.1" 406 320 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:37:00 -0500] "GET / HTTP/1.1" 406 320 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:37:05 -0500] "GET / HTTP/1.1" 406 321 "-" "panscient.com"
84.239.41.39 - - [27/Jan/2026:14:37:06 -0500] "GET / HTTP/1.1" 406 320 "-" "panscient.com"
92.253.195.26 - - [27/Jan/2026:15:47:01 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
92.253.195.26 - - [27/Jan/2026:15:47:06 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
182.42.110.255 - - [27/Jan/2026:16:05:58 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
43.130.16.212 - - [27/Jan/2026:17:08:39 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
79.160.90.214 - - [27/Jan/2026:17:14:17 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 26_1_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/144.0.7559.95 Mobile/15E148 Safari/604.1"
185.194.178.71 - - [27/Jan/2026:18:05:56 -0500] "GET /vendor/phpunit/phpunit/phpunit.xsd HTTP/1.1" 302 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Firefox/52.0"
66.249.66.32 - - [27/Jan/2026:19:17:03 -0500] "GET /robots.txt HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
66.249.66.2 - - [27/Jan/2026:19:17:04 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.7499.192 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
162.142.125.119 - - [27/Jan/2026:20:32:46 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
101.33.81.73 - - [27/Jan/2026:20:44:16 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
45.148.10.64 - - [27/Jan/2026:20:49:05 -0500] "GET /.git/config HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.75 Safari/537.36"
104.23.217.99 - - [27/Jan/2026:21:17:56 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
172.68.183.28 - - [27/Jan/2026:21:18:30 -0500] "GET /wp-admin/setup-config.php HTTP/1.1" 302 - "-" "https://melissaober.com/wp-admin/setup-config.php"
172.68.183.27 - - [27/Jan/2026:21:18:30 -0500] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36"
104.23.221.179 - - [27/Jan/2026:21:19:30 -0500] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 302 - "-" "http://melissaober.com/wordpress/wp-admin/setup-config.php"
199.45.154.152 - - [27/Jan/2026:21:37:19 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)"
106.227.49.113 - - [27/Jan/2026:22:07:33 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
147.185.132.171 - - [27/Jan/2026:22:23:37 -0500] "GET / HTTP/1.1" 302 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"
170.106.82.209 - - [27/Jan/2026:23:17:07 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
108.187.253.33 - - [28/Jan/2026:00:20:33 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
64.137.93.18 - - [28/Jan/2026:00:39:56 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36"
101.33.81.73 - - [28/Jan/2026:02:39:19 -0500] "GET / HTTP/1.1" 302 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1"
74.7.175.130 - - [28/Jan/2026:03:17:41 -0500] "GET /robots.txt HTTP/1.1" 302 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot"
205.210.31.106 - - [28/Jan/2026:03:39:56 -0500] "GET / HTTP/1.1" 302 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity"