| Server IP : 104.26.3.156 / Your IP : 216.73.217.103 Web Server : nginx/1.27.1 System : Linux us-1 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64 User : vinodai ( 3134) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /storage/v1396/themastermynd/logs/ |
Upload File : |
167.172.73.193 - - - 200 BYPASS - - [30/Jul/2026:00:15:48 +0000] "GET /wp-login.php HTTP/1.1" 3124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.172.73.193, 127.0.0.1, 167.172.73.193, 167.172.73.193" 167.172.73.193 - - - 401 BYPASS - - [30/Jul/2026:00:15:50 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.172.73.193, 127.0.0.1, 167.172.73.193, 167.172.73.193" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:00:33:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785371622.8181760311126708984375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 216.73.217.178 - - - 200 BYPASS - - [30/Jul/2026:00:33:43 +0000] "GET /wp-sitemap.xml HTTP/1.1" 575 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.178, 127.0.0.1, 216.73.217.178, 216.73.217.178" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:00:36:28 +0000] "POST /wp-cron.php?doing_wp_cron=1785371788.2203860282897949218750 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 144.16.144.93 - - - 200 BYPASS - - [30/Jul/2026:00:36:28 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.16.144.93, 127.0.0.1, 144.16.144.93, 144.16.144.93" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:00:36:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785371798.4905610084533691406250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 144.16.144.93 - - - 401 BYPASS - - [30/Jul/2026:00:36:39 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "144.16.144.93, 127.0.0.1, 144.16.144.93, 144.16.144.93" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:00:44:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785372295.0696640014648437500000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 72.167.132.114 - - - 200 BYPASS - - [30/Jul/2026:00:44:55 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 127.0.0.1, 72.167.132.114, 72.167.132.114" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:00:45:54 +0000] "POST /wp-cron.php?doing_wp_cron=1785372354.2253320217132568359375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 158.69.54.144 - - - 200 BYPASS - - [30/Jul/2026:00:45:54 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "158.69.54.144, 127.0.0.1, 158.69.54.144, 158.69.54.144" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:01:03:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785373432.9949419498443603515625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 104.64.221.171 - - - 404 BYPASS - - [30/Jul/2026:01:03:53 +0000] "GET /administrator/ HTTP/1.1" 22856 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" "104.64.221.171, 127.0.0.1, 104.64.221.171, 104.64.221.171" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:01:23:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785374604.7174069881439208984375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 192.250.227.35 - - - 200 BYPASS - - [30/Jul/2026:01:23:25 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.35, 127.0.0.1, 192.250.227.35, 192.250.227.35" 192.250.227.35 - - - 401 BYPASS - - [30/Jul/2026:01:23:27 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.227.35, 127.0.0.1, 192.250.227.35, 192.250.227.35" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:46 +0000] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:48 +0000] "GET /php8.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:48 +0000] "GET /lite.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:48 +0000] "GET /term.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:48 +0000] "GET /config.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:49 +0000] "GET /wp-good.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:49 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:01:38:49 +0000] "POST /wp-cron.php?doing_wp_cron=1785375529.2697300910949707031250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:49 +0000] "GET /assets/ HTTP/1.1" 22849 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:50 +0000] "GET /abcd.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:50 +0000] "GET /x.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:50 +0000] "GET /goods.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:50 +0000] "GET /wp-access.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:38:51 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:51 +0000] "GET /filemanager.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:51 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:51 +0000] "GET /bthil.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:38:52 +0000] "GET /xmlrpc.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:52 +0000] "GET /cv.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:38:52 +0000] "GET /wp-content/packed.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:53 +0000] "GET /css.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:53 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:53 +0000] "GET /core.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:54 +0000] "GET /admin/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:54 +0000] "GET /admin/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:54 +0000] "GET /storage/rip.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:54 +0000] "GET /ahax.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:54 +0000] "GET /zoom1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:55 +0000] "GET /txets.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:38:55 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:55 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:56 +0000] "GET /radio.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:56 +0000] "GET /item.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:56 +0000] "GET /t.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:56 +0000] "GET /i.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:57 +0000] "GET /deepseek_d.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:38:57 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:57 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:38:58 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:58 +0000] "GET /assets/images/doc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:58 +0000] "GET /bgymj.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:38:58 +0000] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 301 BYPASS - - [30/Jul/2026:01:39:00 +0000] "GET /images/ HTTP/1.1" 431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 200 BYPASS - - [30/Jul/2026:01:39:00 +0000] "GET /wp-load.php HTTP/1.1" 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:01 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:01 +0000] "GET /a.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:01 +0000] "GET /u.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:02 +0000] "GET /r.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:02 +0000] "GET /wp-blog.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:02 +0000] "GET /xxx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:03 +0000] "GET /tool.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:03 +0000] "GET /wp-content.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:03 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 22862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /k.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 301 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /vendor/ HTTP/1.1" 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /root.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /ws.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /p.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /elp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /a1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:04 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:05 +0000] "GET /install.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:05 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:06 +0000] "GET /upload.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:06 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:06 +0000] "GET /alfa-rex.php7 HTTP/1.1" 22858 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:06 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:07 +0000] "GET /wp-content/file.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:07 +0000] "GET /files.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:07 +0000] "GET /o.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:07 +0000] "GET /file2.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:07 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:07 +0000] "GET /xda.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:08 +0000] "GET /theme.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:08 +0000] "GET //classwithtostring.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:08 +0000] "GET /news.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:09 +0000] "GET /about/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:09 +0000] "GET /wp-includes/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:09 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:11 +0000] "GET /lock360.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:11 +0000] "GET /wp-conflg.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:12 +0000] "GET /123.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:14 +0000] "GET /yanz.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:14 +0000] "GET /autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:14 +0000] "GET /bi.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:14 +0000] "GET /cc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:14 +0000] "GET /files/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:15 +0000] "GET /disagraeosc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:15 +0000] "GET /wp-logs.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:16 +0000] "GET /system_log.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:16 +0000] "GET /24.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:16 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:01:39:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785375556.1444759368896484375000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:16 +0000] "GET /1.php7 HTTP/1.1" 22853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:17 +0000] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:17 +0000] "GET /num.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:17 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 22862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:18 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:18 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:19 +0000] "GET /wp-content/et-cache/ HTTP/1.1" 22857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:19 +0000] "GET /gifclass.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:19 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:01:39:19 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:20 +0000] "GET /css/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 200 BYPASS - - [30/Jul/2026:01:39:20 +0000] "GET /wp-cron.php HTTP/1.1" 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:20 +0000] "GET /wp-block.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:01:39:20 +0000] "GET /wp-includes/fonts/admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:01:59:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785376752.5996620655059814453125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 112.78.134.58 - - - 200 BYPASS - - [30/Jul/2026:01:59:13 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "112.78.134.58, 127.0.0.1, 112.78.134.58, 112.78.134.58" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:13:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785377580.3383378982543945312500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 217.182.128.41 - - - 200 BYPASS - - [30/Jul/2026:02:13:01 +0000] "GET /wp-login.php HTTP/1.1" 3124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 127.0.0.1, 217.182.128.41, 217.182.128.41" 217.182.128.41 - - - 401 BYPASS - - [30/Jul/2026:02:13:04 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 127.0.0.1, 217.182.128.41, 217.182.128.41" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:21:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785378078.2993290424346923828125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 103.174.51.103 - - - 200 BYPASS - - [30/Jul/2026:02:21:19 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 127.0.0.1, 103.174.51.103, 103.174.51.103" 103.174.51.103 - - - 401 BYPASS - - [30/Jul/2026:02:21:23 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.174.51.103, 127.0.0.1, 103.174.51.103, 103.174.51.103" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:33:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785378834.5086820125579833984375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 46.183.16.120 - - - 200 BYPASS - - [30/Jul/2026:02:33:55 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "46.183.16.120, 127.0.0.1, 46.183.16.120, 46.183.16.120" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:33:58 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 594 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:34:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785378848.7641160488128662109375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 46.183.16.120 - - - 401 BYPASS - - [30/Jul/2026:02:34:09 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "46.183.16.120, 127.0.0.1, 46.183.16.120, 46.183.16.120" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:44:34 +0000] "POST /wp-cron.php?doing_wp_cron=1785379473.5132920742034912109375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 216.73.217.178 - - - 200 BYPASS - - [30/Jul/2026:02:44:34 +0000] "GET /wp-sitemap.xml HTTP/1.1" 575 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.178, 127.0.0.1, 216.73.217.178, 216.73.217.178" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:44:38 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 594 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 499 BYPASS - - [30/Jul/2026:02:44:38 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=693b00351a HTTP/1.1" 0 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:51:58 +0000] "GET /--wp-lgj.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:02:51:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785379919.3558740615844726562500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:00 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 22861 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:00 +0000] "GET /.well-known/autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:00 +0000] "GET /.well-known/flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:00 +0000] "GET /.well-known/xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:01 +0000] "GET /.well-known/acme-challenge/flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:01 +0000] "GET /.well-known/acme-challenge/xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:01 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:01 +0000] "GET /.well-known/pki-validation/autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:03 +0000] "GET /.well-known/pki-validation/configKZU/Jump/0-woodhous/Ven-C/Ven-US/0-upstartd/ HTTP/1.1" 22905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:03 +0000] "GET /.well-known/pki-validation/flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:03 +0000] "GET /.well-known/pki-validation/xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:04 +0000] "GET /.wp-cli/autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:04 +0000] "GET /.wp-cli/flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:04 +0000] "GET /.wp-cli/xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:07 +0000] "GET /1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:07 +0000] "GET /admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:07 +0000] "GET /as.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:08 +0000] "GET /autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:08 +0000] "GET /back.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:08 +0000] "GET /c/autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:08 +0000] "GET /c/flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /c/xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /content.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /classwithtostring.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /doc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /dropdown.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:09 +0000] "GET /ee.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:10 +0000] "GET /flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:10 +0000] "GET /gecko-new.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:10 +0000] "GET /m.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:10 +0000] "GET /mah/autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:11 +0000] "GET /mah/flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:11 +0000] "GET /mah/xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:11 +0000] "GET /mini.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:11 +0000] "GET /moon.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:12 +0000] "GET /new.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:12 +0000] "GET /radio.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:12 +0000] "GET /s.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:12 +0000] "GET /sim.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:12 +0000] "GET /text.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:12 +0000] "GET /user.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 404 BYPASS - - [30/Jul/2026:02:52:13 +0000] "GET /webadmin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:02:52:13 +0000] "GET /wordpress/wp-content/plugins/xcvbx/autoload_classmap.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:02:52:13 +0000] "GET /wordpress/wp-content/plugins/xcvbx/flower.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:02:52:13 +0000] "GET /wordpress/wp-content/plugins/xcvbx/xleet.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:02:52:13 +0000] "GET /wordpress/wp-content/themes/as/autoload_classmap.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:02:52:14 +0000] "GET /wordpress/wp-content/themes/as/flower.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 403 BYPASS - - [30/Jul/2026:02:52:14 +0000] "GET /wordpress/wp-content/themes/as/xleet.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 135.119.63.61 - - - 500 BYPASS - - [30/Jul/2026:02:52:15 +0000] "GET /wp-config-sample.php HTTP/1.1" 2767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "135.119.63.61, 127.0.0.1, 135.119.63.61, 135.119.63.61" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /w.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /edit.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /file.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /adminfuns.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /aa.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /classwithtostring.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /goods.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /php8.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:01 +0000] "GET /info.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:02 +0000] "GET /chosen.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:02 +0000] "GET /simple.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:02 +0000] "GET /ioxi-o.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:02 +0000] "GET /av.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 301 BYPASS - - [30/Jul/2026:03:05:02 +0000] "GET /wp-admin HTTP/1.1" 399 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:02 +0000] "GET /wp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /file2.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /images/class-config.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /alfa.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /222.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /asasx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /filemanager.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:03 +0000] "GET /themes.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:03:05:04 +0000] "GET /wp-content/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:04 +0000] "GET /buy.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:04 +0000] "GET /dropdown.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:04 +0000] "GET /inputs.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:04 +0000] "GET /100.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /akc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /php.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /t.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /index/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /wk/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /wp-blink.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:05 +0000] "GET /xfun.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /p.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /wp-content/themes/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /aaa.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /term.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /7.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /file5.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:06 +0000] "GET /makeasmtp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 403 BYPASS - - [30/Jul/2026:03:05:07 +0000] "GET /wp-content/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:07 +0000] "GET /atomlib.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:07 +0000] "GET /min.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:07 +0000] "GET /mac.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.16.169 - - - 404 BYPASS - - [30/Jul/2026:03:05:07 +0000] "GET /nc4.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.16.169, 127.0.0.1, 20.104.16.169, 20.104.16.169" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:22 +0000] "GET /geju.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:22 +0000] "GET /wp-content/plugins/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:22 +0000] "GET /wp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:23 +0000] "GET /aaa.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:23 +0000] "GET /hoot.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:23 +0000] "GET /about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:23 +0000] "GET /admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:23 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:24 +0000] "GET /wp-content/db-cache.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:24 +0000] "GET /wp-content/themes/twentyeleven/functions.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:24 +0000] "GET /wp-content/themes/oceanwp/functions.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:24 +0000] "GET /wp-content/themes/twentythirteen/functions.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:25 +0000] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:25 +0000] "GET /wp-content/themes/twentytwenty/functions.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:25 +0000] "GET /content.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:25 +0000] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:26 +0000] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:26 +0000] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:26 +0000] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:27 +0000] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:27 +0000] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:27 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:27 +0000] "GET /wp-includes/style-engine/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:28 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:28 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:28 +0000] "GET /wp-content/banners/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:28 +0000] "GET /wp-content/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:29 +0000] "GET /.well-known/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:29 +0000] "GET /wp-includes/Text/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:29 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:29 +0000] "GET /img/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:30 +0000] "GET /wp-content/languages/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:30 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:30 +0000] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:32 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:32 +0000] "GET /wp-includes/IXR/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:33 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:33 +0000] "GET /.well-known/pki-validation/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:33 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:33 +0000] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:34 +0000] "GET /wp-content/updraft/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:34 +0000] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:34 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:35 +0000] "GET /images/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:35 +0000] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:35 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:35 +0000] "GET /wp-includes/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:36 +0000] "GET /cgi-bin/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:36 +0000] "GET /wp-content/gallery/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:36 +0000] "GET /wp-includes/blocks/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:36 +0000] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:36 +0000] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:37 +0000] "GET /cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:37 +0000] "GET /cgi-bin/cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:37 +0000] "GET /wp-content/updates.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:38 +0000] "GET /css/cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:38 +0000] "GET /img/cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:38 +0000] "GET /avaa.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:39 +0000] "GET /images/cloud.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:39 +0000] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:39 +0000] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:39 +0000] "GET /updates.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:40 +0000] "GET /libraries/legacy/updates.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:40 +0000] "GET /libraries/phpmailer/updates.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:40 +0000] "GET /libraries/vendor/updates.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:41 +0000] "GET /alfanew.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:41 +0000] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:42 +0000] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 22872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:09:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785380982.1434519290924072265625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:42 +0000] "GET /alfa-rex.php7 HTTP/1.1" 22857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 404 BYPASS - - [30/Jul/2026:03:09:43 +0000] "GET /wp-p.php7 HTTP/1.1" 22853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:44 +0000] "GET /wp-includes/repeater.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 20.104.18.253 - - - 403 BYPASS - - [30/Jul/2026:03:09:44 +0000] "GET /wp-content/repeater.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 127.0.0.1, 20.104.18.253, 20.104.18.253" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:21:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785381663.9384999275207519531250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 59.183.51.100 - - - 200 BYPASS - - [30/Jul/2026:03:21:04 +0000] "GET / HTTP/1.1" 31000 "-" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "59.183.51.100, 127.0.0.1, 59.183.51.100, 59.183.51.100" 59.183.51.100 - - - 200 BYPASS - - [30/Jul/2026:03:21:11 +0000] "GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6 HTTP/1.1" 4662 "https://themastermynd.com/work-with-me/" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "59.183.51.100, 127.0.0.1, 59.183.51.100, 59.183.51.100" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:21:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785381671.0486071109771728515625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 59.183.51.100 - - - 200 BYPASS - - [30/Jul/2026:03:21:11 +0000] "GET /work-with-me/ HTTP/1.1" 25453 "https://themastermynd.com/" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "59.183.51.100, 127.0.0.1, 59.183.51.100, 59.183.51.100" 59.183.51.100 - - - 200 BYPASS - - [30/Jul/2026:03:21:13 +0000] "POST /wp-json/contact-form-7/v1/contact-forms/1710/feedback HTTP/1.1" 778 "https://themastermynd.com/work-with-me/" "Mozilla/5.0 (X11; CrOS x86_64 14541.0.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" "59.183.51.100, 127.0.0.1, 59.183.51.100, 59.183.51.100" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:51 +0000] "GET /test1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:51 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /zoom1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /lock360.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /r.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /sf.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /t.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /7.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /b.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /buy.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /config.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:52 +0000] "GET /num.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:53 +0000] "GET /areak1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:53 +0000] "GET /vc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:53 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:53 +0000] "GET /core.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:54 +0000] "GET /wp-content/min.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:54 +0000] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:54 +0000] "GET /ws37.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:54 +0000] "GET /new.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /il.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /images/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /lite.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /load.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /wp-content/themes/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:55 +0000] "GET /wp-themes.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:56 +0000] "GET /xda.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:56 +0000] "GET /.trash7206/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:24:56 +0000] "POST /wp-cron.php?doing_wp_cron=1785381895.7923970222473144531250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:56 +0000] "GET /doc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:56 +0000] "GET /assets/ HTTP/1.1" 22849 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:56 +0000] "GET /storage/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:57 +0000] "GET /wp-content.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:57 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:57 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:57 +0000] "GET /wp-includes/images/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:58 +0000] "GET /wp-includes/min.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:58 +0000] "GET /cache.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:58 +0000] "GET /filemanager.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:58 +0000] "GET /wp-blog.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:59 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:24:59 +0000] "GET /xmlrpc.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:59 +0000] "GET /css.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:59 +0000] "GET /cd.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:24:59 +0000] "GET /lu4.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:00 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:00 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:00 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:01 +0000] "GET /ant.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:01 +0000] "GET /autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:01 +0000] "GET /storage/rip.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:01 +0000] "GET /tinyfilemanager.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:03 +0000] "GET /403.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:03 +0000] "GET /av.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:03 +0000] "GET /tool.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:03 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:04 +0000] "GET /wp-content/themes/pridmag/b.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:04 +0000] "GET /wp-includes/bk/ HTTP/1.1" 22854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:04 +0000] "GET /wp-includes/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:06 +0000] "GET /wp-trackback.php HTTP/1.1" 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:06 +0000] "GET /ws.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:06 +0000] "GET /0.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:06 +0000] "GET /1index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:07 +0000] "GET /dvve.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:07 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:07 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:07 +0000] "GET /ws77.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:07 +0000] "GET /.bod/.ll/ HTTP/1.1" 22854 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:07 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:09 +0000] "GET /admin/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:09 +0000] "GET /wp-includes/css/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:09 +0000] "GET /xx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:09 +0000] "GET /wp-content/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:09 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:10 +0000] "GET /wp-the.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:10 +0000] "GET /ws81.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:10 +0000] "GET /3.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:10 +0000] "GET /a1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:10 +0000] "GET /ca5.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:11 +0000] "GET /install.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:11 +0000] "GET /radio.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:11 +0000] "GET /wp-signin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:11 +0000] "GET /Ov-Simple1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:11 +0000] "GET /fm.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:12 +0000] "GET /ftde.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:12 +0000] "GET /hplfuns.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:12 +0000] "GET /log.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:12 +0000] "GET /test.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:12 +0000] "GET /txets.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 404 BYPASS - - [30/Jul/2026:03:25:12 +0000] "GET /wp-admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 500 BYPASS - - [30/Jul/2026:03:25:13 +0000] "GET /wp-config-sample.php HTTP/1.1" 2767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:13 +0000] "GET /wp-content/packed.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 20.63.98.115 - - - 403 BYPASS - - [30/Jul/2026:03:25:13 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.63.98.115, 127.0.0.1, 20.63.98.115, 20.63.98.115" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:29:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785382164.3787770271301269531250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 165.22.136.47 - - - 200 BYPASS - - [30/Jul/2026:03:29:25 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "165.22.136.47, 127.0.0.1, 165.22.136.47, 165.22.136.47" 165.22.136.47 - - - 401 BYPASS - - [30/Jul/2026:03:29:27 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "165.22.136.47, 127.0.0.1, 165.22.136.47, 165.22.136.47" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:36:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785382610.3518209457397460937500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 108.179.194.35 - - - 200 BYPASS - - [30/Jul/2026:03:36:51 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35, 127.0.0.1, 108.179.194.35, 108.179.194.35" 108.179.194.35 - - - 401 BYPASS - - [30/Jul/2026:03:36:54 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "108.179.194.35, 127.0.0.1, 108.179.194.35, 108.179.194.35" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:44:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785383092.1767370700836181640625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 217.182.128.41 - - - 200 BYPASS - - [30/Jul/2026:03:44:52 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 127.0.0.1, 217.182.128.41, 217.182.128.41" 217.182.128.41 - - - 401 BYPASS - - [30/Jul/2026:03:44:55 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "217.182.128.41, 127.0.0.1, 217.182.128.41, 217.182.128.41" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:44:56 +0000] "GET /wp-content/uploads/font-awesome/v6.7.2/css/svg-with-js.css HTTP/1.1" 2584 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:03:44:57 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 594 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 499 BYPASS - - [30/Jul/2026:03:44:58 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=693b00351a HTTP/1.1" 0 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:04:04:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785384258.8024930953979492187500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 162.0.217.83 - - - 200 BYPASS - - [30/Jul/2026:04:04:19 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "162.0.217.83, 127.0.0.1, 162.0.217.83, 162.0.217.83" 162.0.217.83 - - - 401 BYPASS - - [30/Jul/2026:04:04:21 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "162.0.217.83, 127.0.0.1, 162.0.217.83, 162.0.217.83" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:04:06:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785384379.9782969951629638671875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 66.249.74.104 - - - 404 BYPASS - - [30/Jul/2026:04:06:20 +0000] "GET /ads.txt HTTP/1.1" 22807 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "66.249.74.104, 127.0.0.1, 66.249.74.104, 66.249.74.104" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:04:19:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785385199.1609001159667968750000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 209.42.31.23 - - - 200 BYPASS - - [30/Jul/2026:04:19:59 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.31.23, 127.0.0.1, 209.42.31.23, 209.42.31.23" 209.42.31.23 - - - 401 BYPASS - - [30/Jul/2026:04:20:01 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.31.23, 127.0.0.1, 209.42.31.23, 209.42.31.23" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:04:35:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785386149.4136428833007812500000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 216.73.217.178 - - - 200 BYPASS - - [30/Jul/2026:04:35:50 +0000] "GET /wp-sitemap.xml HTTP/1.1" 575 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.217.178, 127.0.0.1, 216.73.217.178, 216.73.217.178" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:04:50:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785387000.1285760402679443359375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 192.241.143.148 - - - 200 BYPASS - - [30/Jul/2026:04:50:00 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 127.0.0.1, 192.241.143.148, 192.241.143.148" 192.241.143.148 - - - 401 BYPASS - - [30/Jul/2026:04:50:03 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.241.143.148, 127.0.0.1, 192.241.143.148, 192.241.143.148" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:08 +0000] "GET /chosen.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:08 +0000] "GET /xleet.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:08 +0000] "GET /ds.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:08 +0000] "GET /f5.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:09 +0000] "GET /god4m.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:09 +0000] "GET /info.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:09 +0000] "GET /.__info.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:10 +0000] "GET /0.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:10 +0000] "GET /07.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:11 +0000] "GET /dropdown.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:06:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785387970.4273269176483154296875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:11 +0000] "GET /makeasmtp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:11 +0000] "GET /uploads/ HTTP/1.1" 22851 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:11 +0000] "GET /wp-sigunq.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:11 +0000] "GET /wso112233.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:12 +0000] "GET /alfanew.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:12 +0000] "GET /fw.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:06:14 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 594 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 4.225.203.146 - - - 200 BYPASS - - [30/Jul/2026:05:06:14 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:15 +0000] "GET /simple.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:15 +0000] "GET /classsmtps.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:16 +0000] "GET /wp-blog-header.php HTTP/1.1" 384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:17 +0000] "GET /wp-trackback.php HTTP/1.1" 451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 302 BYPASS - - [30/Jul/2026:05:06:18 +0000] "GET /wp-signup.php HTTP/1.1" 431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 405 BYPASS - - [30/Jul/2026:05:06:19 +0000] "GET /wp-comments-post.php HTTP/1.1" 221 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 403 BYPASS - - [30/Jul/2026:05:06:20 +0000] "GET /wp-mail.php HTTP/1.1" 1425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 302 BYPASS - - [30/Jul/2026:05:06:21 +0000] "GET /wp-activate.php HTTP/1.1" 431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:21 +0000] "GET /post.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:21 +0000] "GET /wp-2019.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:22 +0000] "GET /hoot.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:22 +0000] "GET /log.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:22 +0000] "GET /bak.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:22 +0000] "GET /content.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:22 +0000] "GET /upfile.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:22 +0000] "GET /bypass.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:23 +0000] "GET /updates.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:23 +0000] "GET /xmrlpc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:23 +0000] "GET /ae.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:23 +0000] "GET /moon.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:23 +0000] "GET /blog.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:23 +0000] "GET /ini.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:24 +0000] "GET /admin-ajax.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:24 +0000] "GET /akc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:24 +0000] "GET /akcc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:24 +0000] "GET /asasx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:24 +0000] "GET /axx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:24 +0000] "GET /berax.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:25 +0000] "GET /build.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:25 +0000] "GET /buy.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:25 +0000] "GET /checkbox.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:25 +0000] "GET /cong.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:25 +0000] "GET /file4.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:25 +0000] "GET /flower.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:26 +0000] "GET /form.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:26 +0000] "GET /gecko.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:26 +0000] "GET /kyami.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:26 +0000] "GET /manager.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:26 +0000] "GET /mari.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:26 +0000] "GET /nc4.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 4.225.203.146 - - - 404 BYPASS - - [30/Jul/2026:05:06:28 +0000] "GET /cgi-bin/ HTTP/1.1" 22855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "4.225.203.146, 127.0.0.1, 4.225.203.146, 4.225.203.146" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:19:33 +0000] "POST /wp-cron.php?doing_wp_cron=1785388772.7067499160766601562500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 192.250.239.107 - - - 200 BYPASS - - [30/Jul/2026:05:19:33 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.239.107, 127.0.0.1, 192.250.239.107, 192.250.239.107" 192.250.239.107 - - - 401 BYPASS - - [30/Jul/2026:05:19:35 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "192.250.239.107, 127.0.0.1, 192.250.239.107, 192.250.239.107" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:21:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785388880.4190890789031982421875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 160.250.130.168 - - - 200 BYPASS - - [30/Jul/2026:05:21:21 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "160.250.130.168, 127.0.0.1, 160.250.130.168, 160.250.130.168" 160.250.130.168 - - - 401 BYPASS - - [30/Jul/2026:05:21:23 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "160.250.130.168, 127.0.0.1, 160.250.130.168, 160.250.130.168" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:27:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785389223.2920880317687988281250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 152.53.111.131 - - - 200 BYPASS - - [30/Jul/2026:05:27:04 +0000] "GET /wp-login.php HTTP/1.1" 3127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 127.0.0.1, 152.53.111.131, 152.53.111.131" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:27:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785389230.7550089359283447265625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 152.53.111.131 - - - 401 BYPASS - - [30/Jul/2026:05:27:11 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.53.111.131, 127.0.0.1, 152.53.111.131, 152.53.111.131" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:31:12 +0000] "POST /wp-cron.php?doing_wp_cron=1785389471.8141210079193115234375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 198.57.247.148 - - - 200 BYPASS - - [30/Jul/2026:05:31:12 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.57.247.148, 127.0.0.1, 198.57.247.148, 198.57.247.148" 198.57.247.148 - - - 401 BYPASS - - [30/Jul/2026:05:31:16 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.57.247.148, 127.0.0.1, 198.57.247.148, 198.57.247.148" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:33:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785389589.6231338977813720703125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 152.228.213.32 - - - 200 BYPASS - - [30/Jul/2026:05:33:10 +0000] "GET /wp-login.php HTTP/1.1" 3127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.228.213.32, 127.0.0.1, 152.228.213.32, 152.228.213.32" 152.228.213.32 - - - 401 BYPASS - - [30/Jul/2026:05:33:16 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.228.213.32, 127.0.0.1, 152.228.213.32, 152.228.213.32" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:49:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785390599.1673469543457031250000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 190.6.176.90 - - - 200 BYPASS - - [30/Jul/2026:05:49:59 +0000] "GET /wp-login.php HTTP/1.1" 3124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.6.176.90, 127.0.0.1, 190.6.176.90, 190.6.176.90" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:05:50:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785390606.4970989227294921875000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 190.6.176.90 - - - 401 BYPASS - - [30/Jul/2026:05:50:07 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.6.176.90, 127.0.0.1, 190.6.176.90, 190.6.176.90" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:06:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785392997.9628779888153076171875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 167.71.218.184 - - - 200 BYPASS - - [30/Jul/2026:06:29:58 +0000] "GET /wp-login.php HTTP/1.1" 3127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.218.184, 127.0.0.1, 167.71.218.184, 167.71.218.184" 167.71.218.184 - - - 401 BYPASS - - [30/Jul/2026:06:30:03 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "167.71.218.184, 127.0.0.1, 167.71.218.184, 167.71.218.184" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:06:39:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785393579.0995359420776367187500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 216.73.216.228 - - - 200 BYPASS - - [30/Jul/2026:06:39:39 +0000] "GET /wp-sitemap.xml HTTP/1.1" 575 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.228, 127.0.0.1, 216.73.216.228, 216.73.216.228" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:06:51:11 +0000] "POST /wp-cron.php?doing_wp_cron=1785394270.7289979457855224609375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 213.171.211.213 - - - 200 BYPASS - - [30/Jul/2026:06:51:11 +0000] "GET /wp-login.php HTTP/1.1" 3127 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 127.0.0.1, 213.171.211.213, 213.171.211.213" 213.171.211.213 - - - 401 BYPASS - - [30/Jul/2026:06:51:17 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "213.171.211.213, 127.0.0.1, 213.171.211.213, 213.171.211.213" 20.100.203.84 - - - 403 BYPASS - - [30/Jul/2026:07:21:25 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 297 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:28 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:30 +0000] "GET //aa.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:33 +0000] "GET //av.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:35 +0000] "GET /xa.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:38 +0000] "GET /media.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:41 +0000] "GET /images.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:43 +0000] "GET /gecko.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:44 +0000] "GET /82.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:45 +0000] "GET /xstelth.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:45 +0000] "GET /xp.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:46 +0000] "GET ///admin.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:46 +0000] "GET /adminner.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:47 +0000] "GET //a.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:48 +0000] "GET /k.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:49 +0000] "GET /222.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:50 +0000] "GET /mac.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 403 BYPASS - - [30/Jul/2026:07:21:52 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 403 BYPASS - - [30/Jul/2026:07:21:53 +0000] "GET /wp-includes/Text/ HTTP/1.1" 297 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:55 +0000] "GET /ops.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:56 +0000] "GET /8.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:57 +0000] "GET /FWAZ.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:21:59 +0000] "GET /biufile.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:01 +0000] "GET /coffexium.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:03 +0000] "GET /simple.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:05 +0000] "GET /fpwch.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:08 +0000] "GET /dex.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:10 +0000] "GET /1.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:12 +0000] "GET /config.json.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:13 +0000] "GET /k2.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:14 +0000] "GET /raw.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:15 +0000] "GET //wp.php? HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:15 +0000] "GET /fffm.php?p= HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:17 +0000] "GET /111.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 403 BYPASS - - [30/Jul/2026:07:22:19 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 297 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:22 +0000] "GET /ws.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:25 +0000] "GET ///coffee.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 95.217.67.19 - - - 200 BYPASS - - [30/Jul/2026:07:22:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785396149.5903689861297607421875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 190.6.176.90 - - - 200 BYPASS - - [30/Jul/2026:07:22:30 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.6.176.90, 127.0.0.1, 190.6.176.90, 190.6.176.90" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:31 +0000] "GET /goods.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:32 +0000] "GET /about.php? HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:33 +0000] "GET /about.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 190.6.176.90 - - - 401 BYPASS - - [30/Jul/2026:07:22:35 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "190.6.176.90, 127.0.0.1, 190.6.176.90, 190.6.176.90" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:35 +0000] "GET /admin.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:36 +0000] "GET /inputs.php? HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:37 +0000] "GET /inputs.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:38 +0000] "GET //adminfuns.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:39 +0000] "GET /404.php?p= HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:40 +0000] "GET /xxx.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:42 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:44 +0000] "GET /234ff.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:45 +0000] "GET ///133.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:48 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84" 20.100.203.84 - - - 404 BYPASS - - [30/Jul/2026:07:22:50 +0000] "GET /mgrr.php HTTP/1.1" 347 "-" "-" "20.100.203.84, 127.0.0.1, 20.100.203.84, 20.100.203.84"