%PDF- %PDF-
| Direktori : /home/lightco1/access-logs/ |
| Current File : /home/lightco1/access-logs/favel.lightco.com.au |
203.143.88.233 - - [27/Nov/2025:01:22:16 +1100] "GET /.well-known/acme-challenge/A1VWGJZ2B4NKZ7-Q8Y8S_DDGZ6R7BDXO HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:01:22:17 +1100] "GET /.well-known/acme-challenge/WMXKBM_UFO2ZAX6-KWZBX8SCW4-FVKVU HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:04:22:18 +1100] "GET /.well-known/acme-challenge/B_X1DG2KA52BER1RMZ2IJT_JN10MOE_Z HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:04:22:19 +1100] "GET /.well-known/acme-challenge/A_ZOC9XN2SZPSNL0T61_HCKV5S524DY4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:07:22:18 +1100] "GET /.well-known/acme-challenge/XXT9_INT4KK9OOCO6NP51PYZ76O6BJOB HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:07:22:19 +1100] "GET /.well-known/acme-challenge/1LFKLBDV2YN_S-EY9NT38ED6FNUS_RBH HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:10:22:18 +1100] "GET /.well-known/acme-challenge/0I_NMKQNW_7T9Z2WEIY3J88Y-IO5DEX3 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:10:22:18 +1100] "GET /.well-known/acme-challenge/0QOW921X-62QZ2KHGGCJDZ43XQN623DK HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 4.189.145.250 - - [27/Nov/2025:11:20:57 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:57 +1100] "GET /shoha.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:58 +1100] "GET /bkxzo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:58 +1100] "GET /ioxi-o2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:58 +1100] "GET /777.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:58 +1100] "GET /404.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:58 +1100] "GET /raw.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:58 +1100] "GET /m.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /bolt.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /efile.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /db.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /222.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /ton.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /wp.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:20:59 +1100] "GET /sto.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /n3.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /luxe.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /mans.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /an.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /bless5.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /403.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:00 +1100] "GET /1.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:01 +1100] "GET /abc.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:01 +1100] "GET /o.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:01 +1100] "GET /classwithtostring.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:01 +1100] "GET /system.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:01 +1100] "GET /ahax.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:01 +1100] "GET /chosen.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:02 +1100] "GET /inputs.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:02 +1100] "GET /shell.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:02 +1100] "GET /ze.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:02 +1100] "GET /wsd.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:02 +1100] "GET /file32.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:02 +1100] "GET /wp-is.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:03 +1100] "GET /p.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:03 +1100] "GET /gmo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:03 +1100] "GET /class19.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:03 +1100] "GET /wp-configs.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:03 +1100] "GET /file.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:03 +1100] "GET /asas.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:04 +1100] "GET /a.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:04 +1100] "GET /bless.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:04 +1100] "GET /file15.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:04 +1100] "GET /an7.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:04 +1100] "GET /333.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:04 +1100] "GET /n.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /mds.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /admir.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /wp-admin/maint/wp-is.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /moon.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /wp-admin/admin-post.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /wp-content/themes/admin.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:05 +1100] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /alfa.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /cong.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /123.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /lock360.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /wp-admin/css/colour.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /NewFile.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:06 +1100] "GET /wp-x7.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:07 +1100] "GET /v3.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:07 +1100] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:07 +1100] "GET /555.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:07 +1100] "GET /menu.phphttps://robertatimothy.com/wp-content/packed.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:07 +1100] "GET /AxAo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:07 +1100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /nc.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /file1.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /hook.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /wp-includes/style-engine/index.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /file4.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /ffile.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:08 +1100] "GET /wp1.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:09 +1100] "GET /aa.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:09 +1100] "GET /666.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:09 +1100] "GET /wb.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:09 +1100] "GET /fs.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:09 +1100] "GET /0x.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:10 +1100] "GET /bless11.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:10 +1100] "GET /indo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:10 +1100] "GET /card.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:10 +1100] "GET /menu.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:10 +1100] "GET /mnkalo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:10 +1100] "GET /file3.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:11 +1100] "GET /031.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:11 +1100] "GET /mws.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:11 +1100] "GET /dlu.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:11 +1100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:11 +1100] "GET /wp-the1me.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /lala.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /k.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /css.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /gifclass.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /file9.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /hk.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:12 +1100] "GET /yas.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:13 +1100] "GET /wp-gr.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:13 +1100] "GET /owl.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:13 +1100] "GET /mo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:13 +1100] "GET /file21.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /ok.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /444.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /zc-903.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /cc.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /nij.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /info.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:14 +1100] "GET /radio.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:15 +1100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:15 +1100] "GET /tox.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:15 +1100] "GET /lo.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:15 +1100] "GET /wpls.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:15 +1100] "GET /geck.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:15 +1100] "GET /inde.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /zxin.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /xtt.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /index/function.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /noe.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:16 +1100] "GET /class20.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:17 +1100] "GET /shellalfa.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:17 +1100] "GET /te.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:17 +1100] "GET /a2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:17 +1100] "GET /jp.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:17 +1100] "GET /cccc.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:17 +1100] "GET /fe5.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:18 +1100] "GET /sid3.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:18 +1100] "GET /v4.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:18 +1100] "GET /new4.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:18 +1100] "GET /gg.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:18 +1100] "GET /wp-update.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /gelap.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /class-t.api.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /000.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /wp-content/uploads/index.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /file18.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /v.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:19 +1100] "GET /wp-good.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:20 +1100] "GET /acp.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:20 +1100] "GET /g.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:20 +1100] "GET /static/sallu.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:20 +1100] "GET /class.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:20 +1100] "GET /simple.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:20 +1100] "GET /ioxi-o.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /33.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /wcas.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /wp-content/uploads/wp.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /f6.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /v2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /file5.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:21 +1100] "GET /lol.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:22 +1100] "GET /fileas.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:22 +1100] "GET /error.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:22 +1100] "GET /wolv2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:22 +1100] "GET /ava.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:22 +1100] "GET /shell1.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:22 +1100] "GET /gdn.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:23 +1100] "GET /doc.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:23 +1100] "GET /autoload_classmap.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:23 +1100] "GET /asd67.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:23 +1100] "GET /12.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:23 +1100] "GET /manager.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:23 +1100] "GET /usep.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:24 +1100] "GET /auth.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:24 +1100] "GET /wp-content/packed.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:24 +1100] "GET /hello.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:24 +1100] "GET /abt.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:24 +1100] "GET /jmfi2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:24 +1100] "GET /layout.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:25 +1100] "GET /up.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:25 +1100] "GET /flower.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:25 +1100] "GET /nope.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:25 +1100] "GET /js.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:25 +1100] "GET /wp-content/upgrade/index.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /media.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /update/f35.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /default.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /wp-load.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /f35.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:26 +1100] "GET /sko.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:27 +1100] "GET /new.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:27 +1100] "GET /wp-mail.php/wp-includes/ID3/rnEPv9.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:27 +1100] "GET /png.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:27 +1100] "GET /log.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:27 +1100] "GET /zwso.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /about3.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /fm.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /r4f_1.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /ftp.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /content.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /ext.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:28 +1100] "GET /himu.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /wfile.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /pp.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /miansha.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /test2.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /wp-admin/maint/index.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /wp-links-opml.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:29 +1100] "GET /mah.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:30 +1100] "GET /wp-includes/IXR/about.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:30 +1100] "GET /build.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:30 +1100] "GET /atomlib.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:30 +1100] "GET /lib.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /lv.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /class-wp.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /about.php HTTP/1.1" 500 674 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /filemanager.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /mail.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /CLA.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:31 +1100] "GET /ol.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:32 +1100] "GET /ouh.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:32 +1100] "GET /tgrs.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:32 +1100] "GET /system_log.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:32 +1100] "GET /gifclass4.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:32 +1100] "GET /z.php HTTP/1.1" 403 318 "-" "-" 4.189.145.250 - - [27/Nov/2025:11:21:33 +1100] "GET /akcc.php HTTP/1.1" 403 318 "-" "-" 194.5.82.9 - - [27/Nov/2025:12:35:33 +1100] "GET /inputs.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:33 +1100] "GET /images/class-config.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:36 +1100] "GET /wp-content/1.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:38 +1100] "GET /mar.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:39 +1100] "GET /wp-content/themes/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:39 +1100] "GET /xmlrpc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:40 +1100] "GET /text.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:40 +1100] "GET /buy.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:40 +1100] "GET /function/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:41 +1100] "GET /as.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:42 +1100] "GET /wp-admin/css/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:42 +1100] "GET /tinyfilemanager.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:43 +1100] "GET /contact.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:43 +1100] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:43 +1100] "GET /ws.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:44 +1100] "GET /file/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:44 +1100] "GET /wp-2019.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:45 +1100] "GET /wp-load.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:45 +1100] "GET /.well-known/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:35:46 +1100] "GET /assets/images/doc.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:46 +1100] "GET /z.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:35:47 +1100] "GET /wp-admin/network/natural.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:35:47 +1100] "GET /dashboard.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:35:47 +1100] "GET /wp-admin/css/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:48 +1100] "GET /css.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:48 +1100] "GET /.well-known/pki-validation/about.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:35:48 +1100] "GET /wp-admin/images/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:35:49 +1100] "GET /wp-content/updates.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:49 +1100] "GET /xx.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:35:49 +1100] "GET /geju.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:35:50 +1100] "GET /wp-content/themes/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:51 +1100] "GET /radio.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:35:51 +1100] "GET /mah/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:35:52 +1100] "GET /wp-admin/includes/nav.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:52 +1100] "GET /wp-includes/assets/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:35:52 +1100] "GET /wp-content/upgrade/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:53 +1100] "GET /x.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:35:53 +1100] "GET /admin/upload/css.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:35:54 +1100] "GET /autoload_classmap.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:55 +1100] "GET /lock360.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:35:55 +1100] "GET /byp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:55 +1100] "GET /wp-admin/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:35:56 +1100] "GET /license.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:35:57 +1100] "GET /mah.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:35:57 +1100] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:35:58 +1100] "GET /wp-content/themes/deeto/login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:35:59 +1100] "GET /cgi-bin/file.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:35:59 +1100] "GET /file.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:35:59 +1100] "GET /wp-admin/install.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:36:00 +1100] "GET /alfa-rex.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:01 +1100] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:36:01 +1100] "GET /2.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:01 +1100] "GET /cc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:01 +1100] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:36:02 +1100] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:36:02 +1100] "GET /about/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:03 +1100] "GET /jp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:03 +1100] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:03 +1100] "GET /wp-admin/maint/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:03 +1100] "GET /wp-class.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:36:04 +1100] "GET /wp-signin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:04 +1100] "GET /404.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:05 +1100] "GET /f35.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:05 +1100] "GET /blog.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:05 +1100] "GET /wp-Owl.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:36:06 +1100] "GET /moon.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:06 +1100] "GET /wp-blog.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:06 +1100] "GET /wp-admin/admin-ajax.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:07 +1100] "GET /wp-includes/css/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:36:07 +1100] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:07 +1100] "GET /gg.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:36:08 +1100] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:08 +1100] "GET /eagle.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:36:09 +1100] "GET /wp-admin/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:09 +1100] "GET /lufix.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:10 +1100] "GET /ant.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:36:10 +1100] "GET /cux.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:10 +1100] "GET /i.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:11 +1100] "GET /wp-error.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:11 +1100] "GET /post.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:12 +1100] "GET /send.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:36:12 +1100] "GET /wp-content/plugins/init-help/init.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:13 +1100] "GET /wp-includes/pomo/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:13 +1100] "GET /admin.php?attempt=1 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:36:13 +1100] "GET /log.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:14 +1100] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:14 +1100] "GET /manager.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:15 +1100] "GET /alfa.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:15 +1100] "GET /file7.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:17 +1100] "GET /wp-blog-header.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:17 +1100] "GET /wp-admin/network/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:18 +1100] "GET /wp-admin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:18 +1100] "GET /wp-content/packed.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:18 +1100] "GET /wp-includes/wp-atom.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:19 +1100] "GET /config.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:20 +1100] "GET /69.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:20 +1100] "GET /wp-trackback.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:36:20 +1100] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:21 +1100] "GET /index/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:36:21 +1100] "GET /readme.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:22 +1100] "GET /file.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:22 +1100] "GET /wp-cron.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:23 +1100] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:36:23 +1100] "GET /wp-includes/blocks/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:23 +1100] "GET /new.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:24 +1100] "GET /user.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:36:24 +1100] "GET /wp-includes/wp-class.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:25 +1100] "GET /ty.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:36:25 +1100] "GET /upload.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:26 +1100] "GET /class.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:26 +1100] "GET /tiny.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:27 +1100] "GET /wp-admin/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:27 +1100] "GET /wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:28 +1100] "GET /admin/log.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:28 +1100] "GET /wp-mail.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:28 +1100] "GET /we.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:29 +1100] "GET /wp-includes/Requests/library/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:29 +1100] "GET /wp-links.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:29 +1100] "GET /fm.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:30 +1100] "GET /elp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:30 +1100] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:31 +1100] "GET /dropdown.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:36:31 +1100] "GET /aa.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:32 +1100] "GET /about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:33 +1100] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:33 +1100] "GET /wp-includes/ID3/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:34 +1100] "GET /ioxi002.PhP7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:35 +1100] "GET /wp-admin/network/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:35 +1100] "GET /profile.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:36:36 +1100] "GET /users.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:36 +1100] "GET /flower.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:36:37 +1100] "GET /v.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:36:38 +1100] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:38 +1100] "GET /file2.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:39 +1100] "GET /.well-known/pki-validation/cloud.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:39 +1100] "GET /a.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:40 +1100] "GET /wp-admin/setup-config.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:40 +1100] "GET /file5.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:36:41 +1100] "GET /edit.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:41 +1100] "GET /filemanager/dialog.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:42 +1100] "GET /faiy.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:43 +1100] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:43 +1100] "GET /php8.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:36:44 +1100] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:44 +1100] "GET /wp-content/plugins/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:44 +1100] "GET /akp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:45 +1100] "GET /wp-includes/js/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:36:45 +1100] "GET /u.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:46 +1100] "GET /wp-content/languages/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:46 +1100] "GET /NewFile.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:47 +1100] "GET /classwithtostring.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:47 +1100] "GET /go.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:36:48 +1100] "GET /wp-info.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:36:48 +1100] "GET /system_log.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:49 +1100] "GET /defaults.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:49 +1100] "GET /test.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:36:49 +1100] "GET /themes.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:50 +1100] "GET /packed.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:36:50 +1100] "GET /item.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:50 +1100] "GET /av.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:51 +1100] "GET /wp-content/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:36:51 +1100] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:51 +1100] "GET /simple.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:52 +1100] "GET /cgi-bin/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:52 +1100] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:53 +1100] "GET /bless.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:53 +1100] "GET /wp-admin/options.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:53 +1100] "GET /wp-includes/images/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:54 +1100] "GET /leaf.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:54 +1100] "GET /xBrain.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:36:54 +1100] "GET /lv.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:36:55 +1100] "GET /wp-content/themes/twentytwentythree/styles/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:55 +1100] "GET /about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:36:56 +1100] "GET /wp-content/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:56 +1100] "GET /akc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:36:56 +1100] "GET /info.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:36:57 +1100] "GET /ee.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:36:57 +1100] "GET /options.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:36:58 +1100] "GET /wp-admin/css/colors/ectoplasm/my1.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:36:59 +1100] "GET /gecko.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:36:59 +1100] "GET /wp-includes/rest-api/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:36:59 +1100] "GET /nf_tracking.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:00 +1100] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:01 +1100] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:02 +1100] "GET /wp-content/plugins/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:02 +1100] "GET /admin/cache.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:03 +1100] "GET /filemanager.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:03 +1100] "GET /wp-includes/widgets/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:04 +1100] "GET /.well-known/pki-validation/cux.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:05 +1100] "GET /admin/resources/dummy/log.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:05 +1100] "GET /k.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:05 +1100] "GET /shell20211028.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:06 +1100] "GET /admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:06 +1100] "GET /wp-admin/network/network.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:06 +1100] "GET /default.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:07 +1100] "GET /function.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:07 +1100] "GET /wso.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:07 +1100] "GET /13.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:08 +1100] "GET /wp-admin/js/about.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:37:08 +1100] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:08 +1100] "GET /wso112233.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:37:09 +1100] "GET /1.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:10 +1100] "GET /load.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:10 +1100] "GET /makeasmtp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:37:10 +1100] "GET /403.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:10 +1100] "GET /xc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:11 +1100] "GET /bolt.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:11 +1100] "GET /gawean.PhP7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:12 +1100] "GET /past.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:13 +1100] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:14 +1100] "GET /mini.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:15 +1100] "GET /wp-includes/images/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:15 +1100] "GET /randkeyword.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:37:15 +1100] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:16 +1100] "GET /WSO.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:17 +1100] "GET /wp-content/plugins/erinyani/baxa1.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:17 +1100] "GET /wp-admin/js/widgets/about.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:17 +1100] "GET /sts.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:17 +1100] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:18 +1100] "GET /wp-includes/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:18 +1100] "GET /install.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:18 +1100] "GET /ff2.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:19 +1100] "GET /admin/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:19 +1100] "GET /w.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:19 +1100] "GET /.alf.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:20 +1100] "GET /zwso.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:21 +1100] "GET /system.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:21 +1100] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:22 +1100] "GET /file-manager.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:22 +1100] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:37:23 +1100] "GET /wp-content/plugins/not/includes/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:23 +1100] "GET /wp-includes/wp-load.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:24 +1100] "GET /cgi-bin/xmrlpc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:25 +1100] "GET /f.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:25 +1100] "GET /wp-admin/maint/users.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:26 +1100] "GET /classsmtps.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:26 +1100] "GET /ja.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:37:26 +1100] "GET /wp-admin/classwithtostring.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:27 +1100] "GET /wp-content/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:27 +1100] "GET /wp-admin/includes/media.php.INFECTED.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:29 +1100] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:30 +1100] "GET /t.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:30 +1100] "GET /wp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:31 +1100] "GET /as/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:31 +1100] "GET /randkeyword.PhP7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:32 +1100] "GET /0x.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:33 +1100] "GET /ab.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:37:34 +1100] "GET /wp-includes/Requests/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:34 +1100] "GET /wp-conflg.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:35 +1100] "GET /wp-content/plugins/erinyani/baxa1.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:35 +1100] "GET /wp-admin.phpdiegun.com/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:37:35 +1100] "GET /xleet.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:36 +1100] "GET /wp-content/uploads/wpr-addons/forms/b1ack.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:37:36 +1100] "GET /wp-admin/network/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:37 +1100] "GET /wp-admin/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:37 +1100] "GET /layout.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:38 +1100] "GET /wp-admin/maint/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:38 +1100] "GET /goods.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:39 +1100] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:39 +1100] "GET /wp-admin/includes/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:40 +1100] "GET /baxa1.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:40 +1100] "GET /alfanew.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:40 +1100] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:41 +1100] "GET /theme.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:41 +1100] "GET /akcc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:37:41 +1100] "GET /wp-includes/Text/network.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:42 +1100] "GET /content.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:43 +1100] "GET /.well-known/classwithtostring.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:43 +1100] "GET /wp-includes/fonts/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:43 +1100] "GET /mail.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:44 +1100] "GET /wp-admin/js/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:44 +1100] "GET /leafmailer.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:44 +1100] "GET /image-gallery.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:45 +1100] "GET /admin/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:45 +1100] "GET /file.php?fm=true HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:45 +1100] "GET /wp-includes/pomo/mpvloi.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:46 +1100] "GET /about.php?525 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:46 +1100] "GET /gel4y.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:37:46 +1100] "GET /simple/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:47 +1100] "GET /wp-includes/style-engine/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:47 +1100] "GET /goods.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:47 +1100] "GET /admin/WebService/log.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:48 +1100] "GET /baxa1.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:37:48 +1100] "GET /wp-admin/images/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:37:48 +1100] "GET /autoload_classmap/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:49 +1100] "GET /doc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:49 +1100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:50 +1100] "GET /ioxi-o.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:50 +1100] "GET /link.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:37:50 +1100] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:51 +1100] "GET /asasx.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:51 +1100] "GET /wp-content/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:51 +1100] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:52 +1100] "GET /wp-file.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:52 +1100] "GET /chosen.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:53 +1100] "GET /ini.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:37:53 +1100] "GET /g.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:37:53 +1100] "GET /annt.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:54 +1100] "GET /atomlib.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:54 +1100] "GET /wp-includes/customize/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:54 +1100] "GET /s.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:55 +1100] "GET /adminfuns.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:55 +1100] "GET /wp-content/cong.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:55 +1100] "GET /wp-atom.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:37:56 +1100] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:37:56 +1100] "GET /cong.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:57 +1100] "GET /ton.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:57 +1100] "GET /man.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:37:58 +1100] "GET /wp-includes/Text/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:37:58 +1100] "GET /wp-configs.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:58 +1100] "GET /.well-known/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:37:59 +1100] "GET /images/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:37:59 +1100] "GET /wp-admin/includes/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:38:00 +1100] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:01 +1100] "GET /wp-includes/IXR/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:02 +1100] "GET /shell.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:03 +1100] "GET /wp-content/file.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:03 +1100] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:04 +1100] "GET /files.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:04 +1100] "GET /item.php/admin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:04 +1100] "GET /class.api.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:05 +1100] "GET /wp-content/uploads/de_fb_uploads/b.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:05 +1100] "GET /dz.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:05 +1100] "GET /wp-includes/customize/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:06 +1100] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:06 +1100] "GET /wp-admin/themes.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:06 +1100] "GET /wp-admin/includes/xmrlpc.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:07 +1100] "GET /bengi.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:07 +1100] "GET /wp-admin/custom-plugin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:07 +1100] "GET /error.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:08 +1100] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:08 +1100] "GET /gmo.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:38:09 +1100] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:09 +1100] "GET /ar.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:38:09 +1100] "GET /wp-admin/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:38:10 +1100] "GET /wp-includes/js/codemirror/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:10 +1100] "GET /b.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:11 +1100] "GET /anonse/lock360.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:11 +1100] "GET /plugins.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:38:11 +1100] "GET /wp-includes/js/jcrop/Jcrop.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:12 +1100] "GET /wp-includes/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:12 +1100] "GET /wp-admin/js/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:12 +1100] "GET /root.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:13 +1100] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:38:14 +1100] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:14 +1100] "GET /wp-includes/js/tinymce/skins/wordpress/images/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:15 +1100] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:16 +1100] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:16 +1100] "GET /sb.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:17 +1100] "GET /BenX/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:17 +1100] "GET /22.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:18 +1100] "GET /wp-admin/css/colors/ectoplasm/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:18 +1100] "GET /bak.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:18 +1100] "GET /wp-content/shell20211028.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:19 +1100] "GET /shx.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:19 +1100] "GET /wp-content/uploads/wp.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:19 +1100] "GET /wp-content/languages/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:38:20 +1100] "GET /wp-content/plugins/secure-fortress/avdb_3f7a1921c1e2b.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:20 +1100] "GET /wp-admin/wp-admins.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:38:20 +1100] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:21 +1100] "GET /admin/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:21 +1100] "GET /mailer.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:22 +1100] "GET /webadmin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:23 +1100] "GET /wp-content/plugins/phpad/as.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:38:23 +1100] "GET /wp-content/uploads/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:38:23 +1100] "GET /.well-known/acme-challenge/cloud.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:24 +1100] "GET /wp-admin/images/cloud.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:38:24 +1100] "GET /wp-includes/certificates/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:24 +1100] "GET /wp-content/themes/404.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:25 +1100] "GET /c.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:25 +1100] "GET /rss.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:38:25 +1100] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:26 +1100] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:26 +1100] "GET /xmrlpc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:27 +1100] "GET /flywheel.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:27 +1100] "GET /xxx.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:27 +1100] "GET /.well-known/ALFA_DATA/alfacgiapi/perl.alfa.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:27 +1100] "GET /wp-admin/users.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:28 +1100] "GET /wp-content/plugins/sid/sidwso.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:28 +1100] "GET /help.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:38:29 +1100] "GET /man.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:29 +1100] "GET /wp-admin/29rc7ExgS6p.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:29 +1100] "GET /www.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:30 +1100] "GET /admin/include/student.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:30 +1100] "GET /0.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:31 +1100] "GET /wp-includes/ID3/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:38:31 +1100] "GET /wp-content/uploads/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:32 +1100] "GET /wp-logs.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:38:33 +1100] "GET /wp-admin/css/OK.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:33 +1100] "GET /db.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:34 +1100] "GET /wp-config.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:34 +1100] "GET /wp-includes/Text/Diff/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:38:34 +1100] "GET /.well-known/acme-challenge/makeasmtp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:35 +1100] "GET /wsa.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:35 +1100] "GET /wp-includes/Requests/src/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:35 +1100] "GET /cloud.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:36 +1100] "GET /wp-includes/block-supports/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:36 +1100] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:36 +1100] "GET /edit.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:37 +1100] "GET /st.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:38:37 +1100] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:37 +1100] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:38 +1100] "GET /cgi-bin/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:38 +1100] "GET /wp-content/blue.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:38 +1100] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:38 +1100] "GET /wp-admin/user/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:38:39 +1100] "GET /yanz.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:39 +1100] "GET /wp-includes/css/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:39 +1100] "GET /wp-admin/admin-wolf.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:40 +1100] "GET /MARIJUANA.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:41 +1100] "GET /wp-content/plugins/xc.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:41 +1100] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:41 +1100] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:42 +1100] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:38:42 +1100] "GET /wp-admin/css/go.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:42 +1100] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:43 +1100] "GET /dash.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:43 +1100] "GET /wp-content/plugins/fix/custom-plugin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:44 +1100] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:44 +1100] "GET /wp-admin/images/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:45 +1100] "GET /bala.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:38:47 +1100] "GET /wp-content/themes/twentytwenty/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:48 +1100] "GET /fm1.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:38:48 +1100] "GET /he.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:49 +1100] "GET /wp-includes/ID3/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:49 +1100] "GET /updates.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:38:49 +1100] "GET /wp-includes/pomo/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:50 +1100] "GET /wp-admin/fw.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:50 +1100] "GET /wp-includes/pomo/yellow.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:38:50 +1100] "GET /01.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:51 +1100] "GET /wp-admin/js/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:38:51 +1100] "GET /alfanew.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:52 +1100] "GET /leaf_mailer.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:52 +1100] "GET /wp-content/plugins/linkpreview/db.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:52 +1100] "GET /wp-includes/IXR/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:53 +1100] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:38:53 +1100] "GET /adminfuns.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:53 +1100] "GET /abe.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:38:54 +1100] "GET /wp-content/themes/pridmag/j.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:54 +1100] "GET /plugin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:54 +1100] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:55 +1100] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:55 +1100] "GET /click.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:55 +1100] "GET /blog/fw.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:38:56 +1100] "GET /wp-admin/css/colors/sunrise/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:38:56 +1100] "GET /.well-known/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:56 +1100] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:38:57 +1100] "GET /wp-admin/network/plugins.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:57 +1100] "GET /wp-includes/js/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:57 +1100] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:38:58 +1100] "GET /wp-content/themes/remv.php.INFECTED.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:58 +1100] "GET /cache.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:58 +1100] "GET /wordpress/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:59 +1100] "GET /menu.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:38:59 +1100] "GET /wp-includes/mah.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:00 +1100] "GET /alf.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:00 +1100] "GET /wp-includes/themes.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:39:01 +1100] "GET /.well-known/radio.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:01 +1100] "GET /wp-content/wp.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:01 +1100] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:02 +1100] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:02 +1100] "GET /baxa1.phP8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:02 +1100] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:03 +1100] "GET /m.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:03 +1100] "GET /wp-includes/Text/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:39:03 +1100] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:04 +1100] "GET /inputs.phpdunamisconcept.com.ng/item.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:04 +1100] "GET /wp-includes/wp-class.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:05 +1100] "GET /wp-wso.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:06 +1100] "GET /.well-known/info.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:06 +1100] "GET /assets/images/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:39:07 +1100] "GET /wp-head.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:08 +1100] "GET /wordpress/wp-admin/setup-config.php?step=1 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:39:08 +1100] "GET /wordpress/wp-includes/IXR/allez.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:09 +1100] "GET /wp-admin/css/colors/coffee/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:09 +1100] "GET /epinyins.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:10 +1100] "GET /lock.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:10 +1100] "GET /wp-admin/maint/wp-damin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:39:10 +1100] "GET /wp-content.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:11 +1100] "GET /wp-admin/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:11 +1100] "GET /admin/function.php/install.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:11 +1100] "GET /wp-links-opml.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:12 +1100] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:39:13 +1100] "GET /admin/resources/cache.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:13 +1100] "GET /12.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:14 +1100] "GET /favicon.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:14 +1100] "GET /wp-includes/js/codemirror/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:39:14 +1100] "GET /wp-content/radio.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:15 +1100] "GET /inc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:15 +1100] "GET /wp-admin/log.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:15 +1100] "GET /files.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:39:16 +1100] "GET /fw.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:16 +1100] "GET /l.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:16 +1100] "GET /contents.php/lv.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:17 +1100] "GET /themes/zMousse/otuz1.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:39:17 +1100] "GET /wp-activate.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:17 +1100] "GET /wp-includes/css/dist/niil.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:18 +1100] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:18 +1100] "GET /wp-includes/fonts/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:39:19 +1100] "GET /.well-known/log.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:20 +1100] "GET /wp-admin/fmadmin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:39:20 +1100] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:21 +1100] "GET /alfanew2.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:39:22 +1100] "GET /hi.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:22 +1100] "GET /wp-content/plugins/seoxx/randkeyword.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:23 +1100] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:23 +1100] "GET /lf.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:24 +1100] "GET /wp-config-sample.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:25 +1100] "GET /wp/abe.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:25 +1100] "GET /wp-includes/header.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:39:25 +1100] "GET /.well-known/pki-validation/file.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:39:26 +1100] "GET /.well-known/acme-challenge/xmrlpc.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:26 +1100] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:27 +1100] "GET /wp-admin/maint/yes.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:27 +1100] "GET /wp-includes/sodium_compat/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:27 +1100] "GET /ynz.PhP7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:28 +1100] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:28 +1100] "GET /gecko-new.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:29 +1100] "GET /fox.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:29 +1100] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:29 +1100] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:30 +1100] "GET /10.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:39:30 +1100] "GET /.well-known/wso112233.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:31 +1100] "GET /.bod/.ll/ss.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:31 +1100] "GET /upload/upload.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:31 +1100] "GET /wp-includes/rk2.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:32 +1100] "GET /t.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:39:32 +1100] "GET /about.php/wp-includes/Text/network.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:32 +1100] "GET /wp-admin/user/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:33 +1100] "GET /wp-content/updraft/themes.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:33 +1100] "GET /anj.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:33 +1100] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:34 +1100] "GET /wp-content/themes/pridmag/layout.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:34 +1100] "GET /bs1.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:34 +1100] "GET /worksec.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:35 +1100] "GET /p.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:35 +1100] "GET /hehe.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:35 +1100] "GET /wp-includes/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:36 +1100] "GET /vv.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:36 +1100] "GET /wp-admin/alfa.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:36 +1100] "GET /wp-admin/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:36 +1100] "GET /randkeyword.PhP8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:37 +1100] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:37 +1100] "GET /wp-admin/user/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:37 +1100] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:39:38 +1100] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:38 +1100] "GET /wp-admin/maint/go.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:38 +1100] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:39 +1100] "GET /natural.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:39 +1100] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:39 +1100] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:39:40 +1100] "GET /wp-admin/images/file.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:40 +1100] "GET /wp-includes/buy.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:41 +1100] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:41 +1100] "GET /o.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:42 +1100] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:42 +1100] "GET /al.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:42 +1100] "GET /.well-known/themes.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:43 +1100] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:43 +1100] "GET /.well-known/pki-validation/afnew.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:43 +1100] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:39:44 +1100] "GET /style.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:44 +1100] "GET /wp-l0gin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:44 +1100] "GET /wp-admin/shell.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:44 +1100] "GET /wp-includes/SimplePie/alfa-rex.php8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:39:45 +1100] "GET /img/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:45 +1100] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:46 +1100] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:46 +1100] "GET /wp-admin/js/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:47 +1100] "GET /server.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:47 +1100] "GET /wp-includes/sodium_compat/src/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:48 +1100] "GET /wp-crom.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:39:49 +1100] "GET /wp-includes/install.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:49 +1100] "GET /wp-includes/SimplePie/plugins.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:50 +1100] "GET /worm0.PhP7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:39:50 +1100] "GET /asus.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:51 +1100] "GET /ioxi01.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:39:51 +1100] "GET /wp-admin/user/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:51 +1100] "GET /wp-admin/plugin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:51 +1100] "GET /wp-cache.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:52 +1100] "GET /.well-known/as.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:52 +1100] "GET /bb.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:39:52 +1100] "GET /form.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:53 +1100] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:53 +1100] "GET /alex.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:39:54 +1100] "GET /wp-content/themes/newstoday/lang.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:39:54 +1100] "GET /wp-content/plugins/zedd/1.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:39:55 +1100] "GET /wp-content/upgrade/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:55 +1100] "GET /wp-includes/SimplePie/XML/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:56 +1100] "GET /wp-includes/php-compat/chosen.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:56 +1100] "GET /h.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:39:56 +1100] "GET /wp-content/plugins/hello.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:39:57 +1100] "GET /0byte.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:57 +1100] "GET /up.php?x= HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:58 +1100] "GET /.well-known/xoxo.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:58 +1100] "GET /wp-admin/wp-admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.9 - - [27/Nov/2025:12:39:59 +1100] "GET /wp-admin/wp.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:39:59 +1100] "GET /7.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:00 +1100] "GET /wp-content/themes/twentytwelve/css/alfa-rex.php8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:00 +1100] "GET /ALFA_DATA/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:40:01 +1100] "GET /wp-content/uploads/suit5y.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:01 +1100] "GET /html_editor.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:40:01 +1100] "GET /wp-content/themes/pridmag/404.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:02 +1100] "GET /.well-known/content.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:40:02 +1100] "GET /wp-includes/Text/Diff/alfa-rex.php8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:02 +1100] "GET /wp-content/plugins/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:40:02 +1100] "GET /wp-admin/js/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:03 +1100] "GET /ae.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:40:04 +1100] "GET /ws.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:04 +1100] "GET /wp-content/themes/wp-pridmag/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:04 +1100] "GET /wp-admin/nciii.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:05 +1100] "GET /soap.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:05 +1100] "GET /.well-known/upfile.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:05 +1100] "GET /.well-known/link.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:40:06 +1100] "GET /about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:06 +1100] "GET /wp-admin/maint/wp-act.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:40:07 +1100] "GET /bsrdf.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:07 +1100] "GET /uploads/up.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:07 +1100] "GET /berlin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:08 +1100] "GET /assets/bypass.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:08 +1100] "GET /update/f35.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:09 +1100] "GET /wp-includes/SimplePie/Decode/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:09 +1100] "GET /index/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:10 +1100] "GET /priv8.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:40:10 +1100] "GET /wp-content/403.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:10 +1100] "GET /wp-admin/mah.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:40:11 +1100] "GET /millo.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:11 +1100] "GET /phpinfo.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:12 +1100] "GET /adminer.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:12 +1100] "GET /.well-known/file.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:12 +1100] "GET /wp-includes/SimplePie/gzdecodes.php.suspected HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:13 +1100] "GET /custom-plugin.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:13 +1100] "GET /cron.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:14 +1100] "GET /wp-includes/js/tinymce/skins/lightgray/about.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:14 +1100] "GET /functions.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:15 +1100] "GET /meta.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:15 +1100] "GET /test1.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:16 +1100] "GET /app.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:16 +1100] "GET /browse.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:17 +1100] "GET /auth.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:18 +1100] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:18 +1100] "GET /files/tinyfilemanager.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:19 +1100] "GET /cgyhj.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:19 +1100] "GET /gelay.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:19 +1100] "GET /administrator/templates/hathor/error.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:40:20 +1100] "GET /wp-content/themes/wp-pridmag/classwithtostring.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.9 - - [27/Nov/2025:12:40:20 +1100] "GET /lol.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:21 +1100] "GET /wp_wrong_datlib.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:40:21 +1100] "GET /wp-includes/SimplePie/system.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:22 +1100] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:22 +1100] "GET /pages.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:22 +1100] "GET /js/fm.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:23 +1100] "GET /index/function.php/wp-includes/Text/network.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:23 +1100] "GET /02.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:40:24 +1100] "GET /.well-known/acme-challenge/autoload_classmap.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:40:24 +1100] "GET /bu5.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:25 +1100] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:26 +1100] "GET /core.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:26 +1100] "GET /wp-includes/fonts/themes.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:27 +1100] "GET /wp-content/themes/file.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:28 +1100] "GET /wp-content/uploads/cong.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:28 +1100] "GET /bypass.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:28 +1100] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:29 +1100] "GET /wp-mail.php/wp-includes/ID3/taptap-null.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.9 - - [27/Nov/2025:12:40:30 +1100] "GET /tdgdesr.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.9 - - [27/Nov/2025:12:40:30 +1100] "GET /cgi-bin/moon.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:31 +1100] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:31 +1100] "GET /wp-content/themes/fitnessbase/404.php?ok HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:32 +1100] "GET /wordpress/wp-includes/shell20211028.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:32 +1100] "GET /wp-content/themes/themes.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:32 +1100] "GET /wp-admin/network/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:33 +1100] "GET /wp-includes/Text/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:33 +1100] "GET /9.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:34 +1100] "GET /wp-admin/404.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:34 +1100] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.9 - - [27/Nov/2025:12:40:35 +1100] "GET /acp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:35 +1100] "GET /cgi-bin/wp-2019.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:35 +1100] "GET /ad.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:36 +1100] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:40:37 +1100] "GET /cong.phpprotectthekids-co.fireyourpestcompany.com/wp-includes/Text/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:37 +1100] "GET /wp-includes/js/alfa-rex.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:38 +1100] "GET /xl.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:40:38 +1100] "GET /wp.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:40:39 +1100] "GET /wp-content/plugins/fix/xc.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:40 +1100] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/Core32.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:40 +1100] "GET /.well-known/pki-validation/install.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.9 - - [27/Nov/2025:12:40:40 +1100] "GET /wp-includes/makeasmtp.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:41 +1100] "GET /.well-known/pki-validation/dbform69.php HTTP/1.1" 404 315 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:41 +1100] "GET /d.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:42 +1100] "GET /wp-includes/images/alfa-rex.php8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:42 +1100] "GET /wp-includes/pomo/fgertreyersd.php.suspected HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:43 +1100] "GET /wp-admin/ajax-actions.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:40:43 +1100] "GET /wp-includes/unix.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:44 +1100] "GET /wp-content/install.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:45 +1100] "GET /wp-content/plugins/elementor/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:40:45 +1100] "GET /img/5/radio.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:47 +1100] "GET /admin.php/wp-includes/Text/network.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:47 +1100] "GET /function/admin.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:40:48 +1100] "GET /jquery.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:40:48 +1100] "GET /owl.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:40:49 +1100] "GET /wp-includes/css/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.9 - - [27/Nov/2025:12:40:49 +1100] "GET /beence.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:49 +1100] "GET /wp-admin/includes/cloud.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.9 - - [27/Nov/2025:12:40:50 +1100] "GET /wp-content/updraft/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:50 +1100] "GET /wp-content/themes/twentytwentythree/parts/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:51 +1100] "GET /wp-content/plugins/Cache/Cache.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:52 +1100] "GET /.well-known/acme-challenge/radio.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.9 - - [27/Nov/2025:12:40:52 +1100] "GET /wp-content/themes/twentytwenty/alfa-rex.php8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.9 - - [27/Nov/2025:12:40:53 +1100] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:40:54 +1100] "GET /upfile.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:54 +1100] "GET /wp-admin/maint/edit.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:55 +1100] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:55 +1100] "GET /q.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:56 +1100] "GET /wp-includes/programa_apoyo_editoriales.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:56 +1100] "GET /wp-admin/css/colors/blue/blue.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.9 - - [27/Nov/2025:12:40:57 +1100] "GET /wp-includes/bak.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:58 +1100] "GET /wp-includes/js/tinymce/skins/alfa-rex.php8 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:59 +1100] "GET /wp-includes/sitemaps/providers/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:40:59 +1100] "GET /wp-includes/SimplePie/Cache/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:00 +1100] "GET /wp-editor.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.9 - - [27/Nov/2025:12:41:01 +1100] "GET /wp-includes/pomo/user-new.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:41:02 +1100] "GET /wp-includes/Requests/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:02 +1100] "GET /wp-includes/Text/Diff/alfa-rex.php7 HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:41:03 +1100] "GET /index/function.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:03 +1100] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.9 - - [27/Nov/2025:12:41:03 +1100] "GET /wp-content/plugins/wordpresss3cll/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:04 +1100] "GET /wp-mail.php/wp-includes/ID3/rk2.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:04 +1100] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:04 +1100] "GET /assets/images/niil.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:05 +1100] "GET /alfashell.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:06 +1100] "GET /y.php HTTP/1.1" 403 318 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:06 +1100] "GET /wp-includes/blocks/autoload_classmap.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.9 - - [27/Nov/2025:12:41:06 +1100] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.9 - - [27/Nov/2025:12:41:07 +1100] "GET /wp-includes/SimplePie/Decode/wp-login.php HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 194.5.82.18 - - [27/Nov/2025:12:41:18 +1100] "GET /wp-includes/assets/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:18 +1100] "GET /files/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:19 +1100] "GET /wp-content/themes/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:19 +1100] "GET /assets/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:41:20 +1100] "GET /wp-includes/PHPMailer/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.18 - - [27/Nov/2025:12:41:20 +1100] "GET /wp-includes/js/codemirror/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:20 +1100] "GET /wp-includes/theme-compat/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:22 +1100] "GET /wp-admin/user/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:23 +1100] "GET /.well-known/ HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:23 +1100] "GET /wp-includes/js/crop/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:24 +1100] "GET /wp-includes/html-api/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:24 +1100] "GET /wp-includes/blocks/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.18 - - [27/Nov/2025:12:41:25 +1100] "GET /wp-includes/pomo/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:25 +1100] "GET /wp-includes/customize/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:25 +1100] "GET /assets/css/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 194.5.82.18 - - [27/Nov/2025:12:41:26 +1100] "GET /wp-includes/Text/Diff/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:26 +1100] "GET /wp-includes/images/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.18 - - [27/Nov/2025:12:41:26 +1100] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:27 +1100] "GET /wp-includes/Text/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:27 +1100] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:27 +1100] "GET /wp-includes/ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.18 - - [27/Nov/2025:12:41:27 +1100] "GET /wp-admin/images/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:41:28 +1100] "GET /wp-includes/css/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:41:28 +1100] "GET /wp-includes/block-supports/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:29 +1100] "GET /wp-admin/maint/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:31 +1100] "GET /images/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:31 +1100] "GET /wp-content/plugins/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.18 - - [27/Nov/2025:12:41:31 +1100] "GET /wp-includes/images/crystal/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:32 +1100] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.18 - - [27/Nov/2025:12:41:32 +1100] "GET /wp-includes/rest-api/search/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:32 +1100] "GET /admin/uploads/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:33 +1100] "GET /wp-admin/meta/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:33 +1100] "GET /wp-includes/ID3/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:33 +1100] "GET /wp-includes/SimplePie/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:34 +1100] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:34 +1100] "GET /wp-content/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.18 - - [27/Nov/2025:12:41:34 +1100] "GET /private/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:35 +1100] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:35 +1100] "GET /wp-includes/Requests/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:36 +1100] "GET /wp-admin/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:36 +1100] "GET /wp-content/upgrade/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:37 +1100] "GET /wp-includes/sitemaps/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.18 - - [27/Nov/2025:12:41:37 +1100] "GET /wp-content/uploads/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:41:37 +1100] "GET /assets/images/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:38 +1100] "GET /wp-includes/css/dist/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:38 +1100] "GET /wp/wp-admin/includes/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:38 +1100] "GET /wp-includes/widgets/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:41:39 +1100] "GET /wp-content/up HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:39 +1100] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:40 +1100] "GET /wp-includes/certificates/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.18 - - [27/Nov/2025:12:41:40 +1100] "GET /wp-admin/css/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:41 +1100] "GET /php/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:41 +1100] "GET /wp-includes/block-bindings/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:42 +1100] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:42 +1100] "GET /plugins/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.18 - - [27/Nov/2025:12:41:42 +1100] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:43 +1100] "GET /wp-includes/images/smilies/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:41:43 +1100] "GET /wp-includes/fonts/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.18 - - [27/Nov/2025:12:41:44 +1100] "GET /admin/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:44 +1100] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:45 +1100] "GET /wp-includes/IXR/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:45 +1100] "GET /wp-content/uploads/gravity_forms/g/f/f/b/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:46 +1100] "GET /wp-includes/Requests/library/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:46 +1100] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:47 +1100] "GET /wp-admin/network/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:47 +1100] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:47 +1100] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.18 - - [27/Nov/2025:12:41:48 +1100] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:48 +1100] "GET /upload/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:48 +1100] "GET /cgi-bin/ HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.18 - - [27/Nov/2025:12:41:49 +1100] "GET /wp-includes/php-compat/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:49 +1100] "GET /modules/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 194.5.82.18 - - [27/Nov/2025:12:41:49 +1100] "GET /wp-includes/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:49 +1100] "GET /wp-includes/rest-api/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:41:50 +1100] "GET /wp-includes/images/media/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:41:51 +1100] "GET /wp-includes/block-patterns/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:52 +1100] "GET /sites/default/files/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:41:52 +1100] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:52 +1100] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:53 +1100] "GET /wp-includes/sodium_compat/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:54 +1100] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:54 +1100] "GET /wp-includes/js/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:41:54 +1100] "GET /wp-admin/js/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.18 - - [27/Nov/2025:12:41:55 +1100] "GET /wp-includes/Requests/Proxy/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:55 +1100] "GET /wp-admin/js/widgets/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:41:56 +1100] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:56 +1100] "GET /wp-includes/js/swfupload/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:57 +1100] "GET /wp-json/wp/v2/posts?cmd=system HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:57 +1100] "GET /uploads/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:41:57 +1100] "GET /wp-includes/style-engine/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:58 +1100] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:58 +1100] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:41:58 +1100] "GET /vendor/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:41:59 +1100] "GET /wp-admin/css/colors/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.18 - - [27/Nov/2025:12:41:59 +1100] "GET /wp-includes/SimplePie/Content/Type/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:41:59 +1100] "GET /ALFA_DATA/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:00 +1100] "GET /admin/controller/extension/extension/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:00 +1100] "GET /wp-includes/Requests/Text/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:01 +1100] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:01 +1100] "GET /tinyfilemanager HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:02 +1100] "GET /wp-content/uploads/2021/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:03 +1100] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:42:04 +1100] "GET /upload/image/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.18 - - [27/Nov/2025:12:42:05 +1100] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:05 +1100] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:06 +1100] "GET /admin/editor/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:06 +1100] "GET /shop/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:06 +1100] "GET /local/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.18 - - [27/Nov/2025:12:42:06 +1100] "GET /wp-includes/blocks/block/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:07 +1100] "GET /img/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.18 - - [27/Nov/2025:12:42:07 +1100] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:07 +1100] "GET /include/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:08 +1100] "GET /wp-includes/js/jquery/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:08 +1100] "GET /.well-known/pki-validation/ HTTP/1.1" 403 318 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:08 +1100] "GET /images/stories/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.18 - - [27/Nov/2025:12:42:08 +1100] "GET /Site/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:09 +1100] "GET /wp-admin/css/colors/light/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.18 - - [27/Nov/2025:12:42:09 +1100] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:09 +1100] "GET /admin/upload/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:10 +1100] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:10 +1100] "GET /wp-includes/blocks/site-logo/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:42:10 +1100] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.18 - - [27/Nov/2025:12:42:11 +1100] "GET /wp-includes/js/mediaelement/renderers/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:11 +1100] "GET /system/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.18 - - [27/Nov/2025:12:42:11 +1100] "GET /wp-content/uploads/2023/03/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:12 +1100] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:13 +1100] "GET /wp-content/languages/themes/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.18 - - [27/Nov/2025:12:42:13 +1100] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:13 +1100] "GET /.well-knownold/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 194.5.82.18 - - [27/Nov/2025:12:42:14 +1100] "GET /wp-content/mu-plugins/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 194.5.82.18 - - [27/Nov/2025:12:42:15 +1100] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.18 - - [27/Nov/2025:12:42:15 +1100] "GET /wp-includes/js/tinymce/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:16 +1100] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:16 +1100] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.18 - - [27/Nov/2025:12:42:16 +1100] "GET /wp-includes/js/thickbox/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:17 +1100] "GET /wp-includes/blocks/post-author/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:17 +1100] "GET /wp-content/uploads/2023/11/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:18 +1100] "GET /wp-includes/SimplePie/Content/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:18 +1100] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:19 +1100] "GET /wp-includes/Requests/Response/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:19 +1100] "GET /docs/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:19 +1100] "GET /wp-includes/random_compat/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:20 +1100] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 194.5.82.18 - - [27/Nov/2025:12:42:20 +1100] "GET /backup/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:21 +1100] "GET /wp-includes/blocks/freeform/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 194.5.82.18 - - [27/Nov/2025:12:42:21 +1100] "GET /wp-includes/js/jcrop/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:22 +1100] "GET /wp-includes/js/dist/development/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:22 +1100] "GET /components/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:23 +1100] "GET /wp-includes/js/dist/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:23 +1100] "GET /aspera/faspex/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 194.5.82.18 - - [27/Nov/2025:12:42:24 +1100] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 194.5.82.18 - - [27/Nov/2025:12:42:24 +1100] "GET /wp-includes/blocks/group/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:24 +1100] "GET /wp-content/uploads/2022/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:25 +1100] "GET /wp-includes/Requests/src/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 194.5.82.18 - - [27/Nov/2025:12:42:25 +1100] "GET /wp-content HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:26 +1100] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:27 +1100] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:27 +1100] "GET /wp-includes/blocks/latest-comments/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 194.5.82.18 - - [27/Nov/2025:12:42:27 +1100] "GET /wp-content/plugins/xt/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 194.5.82.18 - - [27/Nov/2025:12:42:28 +1100] "GET /wp-content/fonts/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 194.5.82.18 - - [27/Nov/2025:12:42:29 +1100] "GET /wp-includes/Requests/Transport/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 194.5.82.18 - - [27/Nov/2025:12:42:30 +1100] "GET /wp-content/uploads/2022/07/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 194.5.82.18 - - [27/Nov/2025:12:42:32 +1100] "GET /.tmb/ HTTP/1.1" 500 674 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 203.143.88.233 - - [27/Nov/2025:13:22:24 +1100] "GET /.well-known/acme-challenge/PPWFCFIPUMG-T7G4S1204RC1RJSCIL_S HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:13:22:24 +1100] "GET /.well-known/acme-challenge/CVOR-CBI7SAVIAKSTE8G59AZAVHCWJF6 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:16:22:19 +1100] "GET /.well-known/acme-challenge/0RJFTDJLCVKAV3DWO06WM-2_ZWD7L62H HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:16:22:19 +1100] "GET /.well-known/acme-challenge/B__BUS-TYEO3QX5EWYZOVQ51DTP7ZSSD HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:19:22:18 +1100] "GET /.well-known/acme-challenge/O2WWMQUL9UHBG7HBETCZJKLZ-KSCN6EQ HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:19:22:18 +1100] "GET /.well-known/acme-challenge/4B44VNZ2DY56FNF-Z3SG4Y8B-ONHKO5U HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 145.220.91.19 - - [27/Nov/2025:20:23:35 +1100] "GET / HTTP/1.1" 403 258 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 203.143.88.233 - - [27/Nov/2025:22:22:20 +1100] "GET /.well-known/acme-challenge/7QD3Z0F8UXR9RQ4P4A_AD7PX891IQAC4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [27/Nov/2025:22:22:20 +1100] "GET /.well-known/acme-challenge/WKVSE8JXB79DLJEEVR4LW2N_OTUPD-PL HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:01:22:19 +1100] "GET /.well-known/acme-challenge/IMNCV-5-KD_826WEJRA44AN3H0KUN8NO HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:01:22:19 +1100] "GET /.well-known/acme-challenge/R1-B_4V9SQIEJQRCVO3ICZ1TEX6-ALC0 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 129.212.227.183 - - [28/Nov/2025:02:26:50 +1100] "GET /style.php HTTP/1.1" 403 258 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 37.46.196.22 - - [28/Nov/2025:03:16:27 +1100] "GET / HTTP/1.1" 403 258 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)" 203.143.88.233 - - [28/Nov/2025:04:22:18 +1100] "GET /.well-known/acme-challenge/F8OQ_FUI3_COZWU84-FOMTKS_OPRRIKN HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:04:22:18 +1100] "GET /.well-known/acme-challenge/XOW33ITN_32AYPIHWSU-F6PQK4W2TZJS HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 129.212.237.19 - - [28/Nov/2025:05:37:51 +1100] "GET /style.php HTTP/1.1" 403 258 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" 34.26.155.218 - - [28/Nov/2025:06:56:13 +1100] "HEAD /blog/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6280.88 Safari/537.36" 34.26.155.218 - - [28/Nov/2025:06:56:13 +1100] "HEAD /backup/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.20 Safari/537.36" 34.26.155.218 - - [28/Nov/2025:06:56:13 +1100] "HEAD /wp/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:123.0) Gecko/20100101 Firefox/123.0" 34.26.155.218 - - [28/Nov/2025:06:56:13 +1100] "HEAD /new/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Linux; Android 12; CPH2381) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.6045.163 Mobile Safari/537.36 OPR/76.3.4027.73374" 34.26.155.218 - - [28/Nov/2025:06:56:14 +1100] "HEAD / HTTP/1.1" 403 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.6167.140 Safari/537.36 Vivaldi/6.4.3160.47" 34.26.155.218 - - [28/Nov/2025:06:56:14 +1100] "HEAD /wordpress/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8 Pro) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.56 Mobile Safari/537.36" 34.26.155.218 - - [28/Nov/2025:06:56:14 +1100] "HEAD /old/ HTTP/1.1" 500 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/123.0.6312.52 Mobile/15E148 Safari/604.1" 199.45.154.127 - - [28/Nov/2025:07:15:51 +1100] "GET / HTTP/1.1" 403 258 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 203.143.88.233 - - [28/Nov/2025:07:22:17 +1100] "GET /.well-known/acme-challenge/WGA3Q9NVUYN3W3QMP2DHY8MU-VJYO1RI HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:07:22:18 +1100] "GET /.well-known/acme-challenge/39ORTBSC57RKJGLA44BMPYUQGYWT6PM4 HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:10:22:16 +1100] "GET /.well-known/acme-challenge/3MVO7WIOBFVBCC3JPKMWPN70OTHENYGC HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:10:22:16 +1100] "GET /.well-known/acme-challenge/9YSAXVN8SGR3A1SXW3ARU_YZZ9-4C2YR HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:13:22:16 +1100] "GET /.well-known/acme-challenge/N4U-4UIJ9QO4GPU5X753-5C_W4EE6_4G HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:13:22:16 +1100] "GET /.well-known/acme-challenge/DWP5ETS5UVCDRW_I-KUXEJW_4KC105FI HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 47.128.121.12 - - [28/Nov/2025:13:56:46 +1100] "GET /robots.txt HTTP/1.1" 500 674 "-" "-" 203.143.88.233 - - [28/Nov/2025:16:22:16 +1100] "GET /.well-known/acme-challenge/BOCHTG04SGKMR5PJWV9CVE5HWGG54XID HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0" 203.143.88.233 - - [28/Nov/2025:16:22:16 +1100] "GET /.well-known/acme-challenge/FTF7XZ4S2FNJUID7G6Y9K1GZAX944D-R HTTP/1.1" 200 64 "-" "Cpanel-HTTP-Client/1.0"