| Server IP : 104.26.3.156 / Your IP : 216.73.216.185 Web Server : nginx/1.27.1 System : Linux us-1 5.15.0-131-generic #141-Ubuntu SMP Fri Jan 10 21:18:28 UTC 2025 x86_64 User : vinodai ( 3134) PHP Version : 7.4.33 Disable Function : exec,passthru,shell_exec,system,proc_open,popen,parse_ini_file,show_source MySQL : OFF | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /storage/v1396/themastermynd/logs/ |
Upload File : |
95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:00:03:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785283395.4578239917755126953125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 51.79.65.194 - - - 200 BYPASS - - [29/Jul/2026:00:03:16 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "51.79.65.194, 127.0.0.1, 51.79.65.194, 51.79.65.194" 51.79.65.194 - - - 401 BYPASS - - [29/Jul/2026:00:03:18 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "51.79.65.194, 127.0.0.1, 51.79.65.194, 51.79.65.194" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:00:12:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785283938.5839240550994873046875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 198.38.94.17 - - - 200 BYPASS - - [29/Jul/2026:00:12:19 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 127.0.0.1, 198.38.94.17, 198.38.94.17" 198.38.94.17 - - - 401 BYPASS - - [29/Jul/2026:00:12:21 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 127.0.0.1, 198.38.94.17, 198.38.94.17" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:00:18:43 +0000] "POST /wp-cron.php?doing_wp_cron=1785284322.7816278934478759765625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 154.38.175.180 - - - 200 BYPASS - - [29/Jul/2026:00:18:43 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 127.0.0.1, 154.38.175.180, 154.38.175.180" 154.38.175.180 - - - 401 BYPASS - - [29/Jul/2026:00:18:45 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "154.38.175.180, 127.0.0.1, 154.38.175.180, 154.38.175.180" 95.168.175.210 - - - 200 BYPASS - - [29/Jul/2026:00:18:45 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "95.168.175.210, 127.0.0.1, 95.168.175.210, 95.168.175.210" 95.168.175.210 - - - 401 BYPASS - - [29/Jul/2026:00:18:48 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "95.168.175.210, 127.0.0.1, 95.168.175.210, 95.168.175.210" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:00:39:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785285564.3175361156463623046875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 216.73.216.238 - - - 200 BYPASS - - [29/Jul/2026:00:39:25 +0000] "GET /wp-sitemap.xml HTTP/1.1" 575 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.238, 127.0.0.1, 216.73.216.238, 216.73.216.238" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:00:42:00 +0000] "POST /wp-cron.php?doing_wp_cron=1785285719.9525659084320068359375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 142.93.83.180 - - - 200 BYPASS - - [29/Jul/2026:00:42:00 +0000] "GET /wp-login.php HTTP/1.1" 3124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "142.93.83.180, 127.0.0.1, 142.93.83.180, 142.93.83.180" 142.93.83.180 - - - 401 BYPASS - - [29/Jul/2026:00:42:03 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "142.93.83.180, 127.0.0.1, 142.93.83.180, 142.93.83.180" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:00:51:06 +0000] "POST /wp-cron.php?doing_wp_cron=1785286265.4187750816345214843750 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 208.109.9.173 - - - 200 BYPASS - - [29/Jul/2026:00:51:06 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "208.109.9.173, 127.0.0.1, 208.109.9.173, 208.109.9.173" 208.109.9.173 - - - 401 BYPASS - - [29/Jul/2026:00:51:09 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "208.109.9.173, 127.0.0.1, 208.109.9.173, 208.109.9.173" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:01:07:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785287251.3376851081848144531250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 156.244.46.207 - - - 200 BYPASS - - [29/Jul/2026:01:07:32 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 127.0.0.1, 156.244.46.207, 156.244.46.207" 156.244.46.207 - - - 401 BYPASS - - [29/Jul/2026:01:07:36 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "156.244.46.207, 127.0.0.1, 156.244.46.207, 156.244.46.207" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:01:16:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785287779.7722499370574951171875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:01:16:20 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 127.0.0.1, 135.148.171.117, 135.148.171.117" 135.148.171.117 - - - 401 BYPASS - - [29/Jul/2026:01:16:22 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 127.0.0.1, 135.148.171.117, 135.148.171.117" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:34 +0000] "GET /wp-includes/interactivity-api/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:34 +0000] "GET /php8.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:35 +0000] "GET /lite.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:35 +0000] "GET /term.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:35 +0000] "GET /config.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:35 +0000] "GET /wp-good.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:36 +0000] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:36 +0000] "GET /abcd.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:36 +0000] "GET /x.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:36 +0000] "GET /assets/ HTTP/1.1" 22850 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:36 +0000] "GET /goods.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:37 +0000] "GET /wp-access.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:01:21:37 +0000] "POST /wp-cron.php?doing_wp_cron=1785288095.8224210739135742187500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:38 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:38 +0000] "GET /filemanager.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:39 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:39 +0000] "GET /bthil.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:39 +0000] "GET /xmlrpc.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:40 +0000] "GET /cv.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:40 +0000] "GET /wp-content/packed.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:40 +0000] "GET /css.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:40 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /core.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /admin/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /admin/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /storage/rip.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /ahax.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /zoom1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:41 +0000] "GET /txets.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:42 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:43 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:43 +0000] "GET /radio.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:43 +0000] "GET /item.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:43 +0000] "GET /t.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:44 +0000] "GET /i.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:44 +0000] "GET /deepseek_d.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:44 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:44 +0000] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:44 +0000] "GET /wp-content/themes/pridmag/il.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:45 +0000] "GET /assets/images/doc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:45 +0000] "GET /bgymj.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:45 +0000] "GET /modules/mod_footer/tmpl/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 200 BYPASS - - [29/Jul/2026:01:21:46 +0000] "GET /wp-load.php HTTP/1.1" 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 301 BYPASS - - [29/Jul/2026:01:21:46 +0000] "GET /images/ HTTP/1.1" 431 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:47 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:47 +0000] "GET /a.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:47 +0000] "GET /u.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:48 +0000] "GET /r.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:48 +0000] "GET /wp-blog.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:48 +0000] "GET /xxx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:49 +0000] "GET /tool.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:49 +0000] "GET /wp-content.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:49 +0000] "GET /k.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:49 +0000] "GET /root.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:49 +0000] "GET /ws.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:49 +0000] "GET /randkeyword.PhP7 HTTP/1.1" 22863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:50 +0000] "GET /p.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:50 +0000] "GET /elp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 301 BYPASS - - [29/Jul/2026:01:21:50 +0000] "GET /vendor/ HTTP/1.1" 444 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:50 +0000] "GET /a1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:50 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:52 +0000] "GET /alfa-rex.php7 HTTP/1.1" 22858 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:52 +0000] "GET /install.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:52 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:53 +0000] "GET /upload.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:53 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:53 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:54 +0000] "GET /wp-content/file.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:54 +0000] "GET /files.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:55 +0000] "GET /o.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:55 +0000] "GET /file2.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:55 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:55 +0000] "GET /xda.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:55 +0000] "GET /theme.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:56 +0000] "GET //classwithtostring.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:56 +0000] "GET /news.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:56 +0000] "GET /about/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:57 +0000] "GET /wp-includes/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:21:57 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:58 +0000] "GET /lock360.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:58 +0000] "GET /wp-conflg.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:58 +0000] "GET /123.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:58 +0000] "GET /yanz.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:58 +0000] "GET /autoload_classmap.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:58 +0000] "GET /bi.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:59 +0000] "GET /cc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:21:59 +0000] "GET /files/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:00 +0000] "GET /1.php7 HTTP/1.1" 22853 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:01 +0000] "GET /disagraeosc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:01 +0000] "GET /wp-logs.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:02 +0000] "GET /system_log.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:04 +0000] "GET /24.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:22:04 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:22:05 +0000] "GET /wp-includes/css/dist/widgets/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:05 +0000] "GET /num.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:06 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 22863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:22:07 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:07 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:07 +0000] "GET /wp-content/et-cache/ HTTP/1.1" 22858 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:07 +0000] "GET /gifclass.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:22:07 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 403 BYPASS - - [29/Jul/2026:01:22:08 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:08 +0000] "GET /css/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 200 BYPASS - - [29/Jul/2026:01:22:08 +0000] "GET /wp-cron.php HTTP/1.1" 390 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:09 +0000] "GET /wp-block.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 172.213.208.20 - - - 404 BYPASS - - [29/Jul/2026:01:22:09 +0000] "GET /wp-includes/fonts/admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.208.20, 127.0.0.1, 172.213.208.20, 172.213.208.20" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:01:27:09 +0000] "POST /wp-cron.php?doing_wp_cron=1785288428.9736149311065673828125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 152.42.137.70 - - - 200 BYPASS - - [29/Jul/2026:01:27:09 +0000] "GET /wp-login.php HTTP/1.1" 3122 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.42.137.70, 127.0.0.1, 152.42.137.70, 152.42.137.70" 152.42.137.70 - - - 401 BYPASS - - [29/Jul/2026:01:27:11 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.42.137.70, 127.0.0.1, 152.42.137.70, 152.42.137.70" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:01:33:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785288780.5457909107208251953125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 194.71.100.75 - - - 200 BYPASS - - [29/Jul/2026:01:33:01 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.71.100.75, 127.0.0.1, 194.71.100.75, 194.71.100.75" 194.71.100.75 - - - 401 BYPASS - - [29/Jul/2026:01:33:03 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "194.71.100.75, 127.0.0.1, 194.71.100.75, 194.71.100.75" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:01:42:10 +0000] "POST /wp-cron.php?doing_wp_cron=1785289329.8317770957946777343750 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 52.232.35.131 - - - 200 BYPASS - - [29/Jul/2026:01:42:10 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.232.35.131, 127.0.0.1, 52.232.35.131, 52.232.35.131" 52.232.35.131 - - - 401 BYPASS - - [29/Jul/2026:01:42:13 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.232.35.131, 127.0.0.1, 52.232.35.131, 52.232.35.131" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:02:21:51 +0000] "POST /wp-cron.php?doing_wp_cron=1785291710.6656670570373535156250 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 198.38.94.87 - - - 200 BYPASS - - [29/Jul/2026:02:21:51 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 127.0.0.1, 198.38.94.87, 198.38.94.87" 198.38.94.87 - - - 401 BYPASS - - [29/Jul/2026:02:21:53 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.87, 127.0.0.1, 198.38.94.87, 198.38.94.87" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:02:25:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785291915.3500149250030517578125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 135.148.171.117 - - - 200 BYPASS - - [29/Jul/2026:02:25:16 +0000] "GET /wp-login.php HTTP/1.1" 3126 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 127.0.0.1, 135.148.171.117, 135.148.171.117" 135.148.171.117 - - - 401 BYPASS - - [29/Jul/2026:02:25:18 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "135.148.171.117, 127.0.0.1, 135.148.171.117, 135.148.171.117" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:02:34:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785292477.5787239074707031250000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 45.92.108.143 - - - 200 BYPASS - - [29/Jul/2026:02:34:38 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.92.108.143, 127.0.0.1, 45.92.108.143, 45.92.108.143" 45.92.108.143 - - - 401 BYPASS - - [29/Jul/2026:02:34:40 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.92.108.143, 127.0.0.1, 45.92.108.143, 45.92.108.143" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:02:40:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785292817.5157439708709716796875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 216.73.216.238 - - - 200 BYPASS - - [29/Jul/2026:02:40:18 +0000] "GET /wp-sitemap.xml HTTP/1.1" 575 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" "216.73.216.238, 127.0.0.1, 216.73.216.238, 216.73.216.238" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:02:42:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785292955.5859758853912353515625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 195.250.26.52 - - - 200 BYPASS - - [29/Jul/2026:02:42:36 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.26.52, 127.0.0.1, 195.250.26.52, 195.250.26.52" 195.250.26.52 - - - 401 BYPASS - - [29/Jul/2026:02:42:38 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.250.26.52, 127.0.0.1, 195.250.26.52, 195.250.26.52" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:20 +0000] "GET /wp-configs.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:21 +0000] "GET /db.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:06:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785294382.6810610294342041015625 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 20.52.54.143 - - - 200 BYPASS - - [29/Jul/2026:03:06:23 +0000] "GET /wp-load.php HTTP/1.1" 297 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:23 +0000] "GET /as/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:24 +0000] "GET /wp-content/languages/wp-login.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:24 +0000] "GET /wp-content/autoload_classmap.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:24 +0000] "GET /wp-content/languages/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:25 +0000] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:25 +0000] "GET /atomlib.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:26 +0000] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:27 +0000] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 22874 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:28 +0000] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:28 +0000] "GET /gebase.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:29 +0000] "GET /2.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:29 +0000] "GET /baxa1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:29 +0000] "GET /settings.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:29 +0000] "GET /wp-content/dropdown.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:30 +0000] "GET /wp-admin.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:31 +0000] "GET /mini.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:31 +0000] "GET /cd.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:31 +0000] "GET /batm.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:31 +0000] "GET /hehehehe.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:31 +0000] "GET /sim.php/wp-includes/certificates/plugins.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:32 +0000] "GET /wp-seo.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:33 +0000] "GET /zwso.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:33 +0000] "GET /user.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:33 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:33 +0000] "GET /byp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:34 +0000] "GET /bs1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:34 +0000] "GET /wp-includes/IXR/allez.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:34 +0000] "GET /load.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:34 +0000] "GET /privacy.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:35 +0000] "GET /wp-cli.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:35 +0000] "GET /media-new.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:36 +0000] "GET /wp-blog.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:36 +0000] "GET /wp-2019.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:36 +0000] "GET /menu.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:36 +0000] "GET /wp-crons.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:37 +0000] "GET /class.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:37 +0000] "GET /login.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:06:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785294398.7470149993896484375000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 20.52.54.143 - - - 200 BYPASS - - [29/Jul/2026:03:06:39 +0000] "GET /search/label/PHP-Shells HTTP/1.1" 24490 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:40 +0000] "GET /aged.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:40 +0000] "GET /vv.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:40 +0000] "GET /user-edit.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:41 +0000] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:41 +0000] "GET /engine.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:41 +0000] "GET /edit-comments.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:43 +0000] "GET /wp-blog-header.php HTTP/1.1" 384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:45 +0000] "GET /alfa-rex.php7 HTTP/1.1" 22857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:45 +0000] "GET /ern1.PhP7 HTTP/1.1" 22857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:47 +0000] "GET /randkeyword.PhP8 HTTP/1.1" 22862 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:47 +0000] "GET /wp-includes/pomo/fgertreyersd.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:48 +0000] "GET /css/xmrlpc.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:48 +0000] "GET /classsmtps.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:48 +0000] "GET /themes/zMousse/otuz1.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:49 +0000] "GET /123.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:49 +0000] "GET /filebrowser.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:50 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:50 +0000] "GET /makeasmtp.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:50 +0000] "GET /admin/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:51 +0000] "GET /wp-includes/Requests/chosen.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:52 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:53 +0000] "GET /wp-includes/pomo/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:53 +0000] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:53 +0000] "GET /.well-known/cong.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:54 +0000] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:54 +0000] "GET /wp-content/languages/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:55 +0000] "GET /about/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:55 +0000] "GET /simple/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:55 +0000] "GET /mah/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:56 +0000] "GET /go.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:56 +0000] "GET /wp-includes/buy.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:56 +0000] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:57 +0000] "GET /home/function.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:57 +0000] "GET /wp-content/upgrade/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:58 +0000] "GET /erin1.PhP7 HTTP/1.1" 22857 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:58 +0000] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:58 +0000] "GET /css/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:58 +0000] "GET /.well-known/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:06:58 +0000] "GET /asasx.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:59 +0000] "GET /wp-content/radio.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:06:59 +0000] "GET /wp-content/plugins/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:07:00 +0000] "GET /st.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:07:00 +0000] "GET /wp-content/about.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:07:00 +0000] "GET /templates/beez3/index.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:07:01 +0000] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:07:01 +0000] "GET /s.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 404 BYPASS - - [29/Jul/2026:03:07:01 +0000] "GET /help.php HTTP/1.1" 406 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 20.52.54.143 - - - 403 BYPASS - - [29/Jul/2026:03:07:02 +0000] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 379 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.52.54.143, 127.0.0.1, 20.52.54.143, 20.52.54.143" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:13:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785294821.7732861042022705078125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 45.11.97.227 - - - 200 BYPASS - - [29/Jul/2026:03:13:42 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.11.97.227, 127.0.0.1, 45.11.97.227, 45.11.97.227" 45.11.97.227 - - - 401 BYPASS - - [29/Jul/2026:03:13:45 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "45.11.97.227, 127.0.0.1, 45.11.97.227, 45.11.97.227" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:20:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785295257.3698799610137939453125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 5.161.225.162 - - - 200 BYPASS - - [29/Jul/2026:03:20:57 +0000] "GET /wp-login.php HTTP/1.1" 3128 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 127.0.0.1, 5.161.225.162, 5.161.225.162" 5.161.225.162 - - - 401 BYPASS - - [29/Jul/2026:03:21:00 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 127.0.0.1, 5.161.225.162, 5.161.225.162" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:34:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785296091.5273408889770507812500 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 5.161.225.162 - - - 200 BYPASS - - [29/Jul/2026:03:34:52 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 127.0.0.1, 5.161.225.162, 5.161.225.162" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:34:55 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 594 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 5.161.225.162 - - - 401 BYPASS - - [29/Jul/2026:03:34:55 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "5.161.225.162, 127.0.0.1, 5.161.225.162, 5.161.225.162" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:42:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785296569.6386280059814453125000 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 52.212.4.38 - - - 200 BYPASS - - [29/Jul/2026:03:42:50 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.212.4.38, 127.0.0.1, 52.212.4.38, 52.212.4.38" 52.212.4.38 - - - 401 BYPASS - - [29/Jul/2026:03:42:52 +0000] "POST /wp-login.php HTTP/1.1" 3965 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "52.212.4.38, 127.0.0.1, 52.212.4.38, 52.212.4.38" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:42:53 +0000] "GET /wp-content/uploads/font-awesome/v6.7.2/css/svg-with-js.css HTTP/1.1" 2584 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:42:54 +0000] "POST /wp-admin/admin-ajax.php HTTP/1.1" 594 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 95.217.67.19 - - - 499 BYPASS - - [29/Jul/2026:03:42:54 +0000] "POST /wp-admin/admin-ajax.php?action=as_async_request_queue_runner&nonce=7a2b0fac9e HTTP/1.1" 0 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 209.42.27.172 - - - 200 BYPASS - - [29/Jul/2026:03:43:06 +0000] "GET /wp-login.php HTTP/1.1" 3124 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.27.172, 127.0.0.1, 209.42.27.172, 209.42.27.172" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:03:43:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785296588.3084290027618408203125 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 209.42.27.172 - - - 401 BYPASS - - [29/Jul/2026:03:43:08 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "209.42.27.172, 127.0.0.1, 209.42.27.172, 209.42.27.172" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:04:04:38 +0000] "POST /wp-cron.php?doing_wp_cron=1785297877.9099900722503662109375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 66.249.74.105 - - - 404 BYPASS - - [29/Jul/2026:04:04:38 +0000] "GET /ads.txt HTTP/1.1" 22808 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "66.249.74.105, 127.0.0.1, 66.249.74.105, 66.249.74.105" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:04:19:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785298796.5604178905487060546875 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 195.130.35.148 - - - 200 BYPASS - - [29/Jul/2026:04:19:57 +0000] "GET /wp-login.php HTTP/1.1" 3123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 127.0.0.1, 195.130.35.148, 195.130.35.148" 195.130.35.148 - - - 401 BYPASS - - [29/Jul/2026:04:19:59 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "195.130.35.148, 127.0.0.1, 195.130.35.148, 195.130.35.148" 95.217.67.19 - - - 200 BYPASS - - [29/Jul/2026:04:27:55 +0000] "POST /wp-cron.php?doing_wp_cron=1785299275.0236699581146240234375 HTTP/1.1" 390 "-" "WordPress/6.9.1; https://themastermynd.com" "95.217.67.19, 127.0.0.1, 95.217.67.19, 95.217.67.19" 185.252.86.65 - - - 200 BYPASS - - [29/Jul/2026:04:27:55 +0000] "GET /wp-login.php HTTP/1.1" 3125 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.252.86.65, 127.0.0.1, 185.252.86.65, 185.252.86.65" 185.252.86.65 - - - 401 BYPASS - - [29/Jul/2026:04:27:58 +0000] "POST /wp-login.php HTTP/1.1" 3964 "https://themastermynd.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "185.252.86.65, 127.0.0.1, 185.252.86.65, 185.252.86.65"