uawdijnntqw1x1x1
IP : 216.73.216.139
Hostname : altar28.supremepanel28.com
Kernel : Linux altar28.supremepanel28.com 4.18.0-553.83.1.lve.el8.x86_64 #1 SMP Wed Nov 12 10:04:12 UTC 2025 x86_64
Disable Function : None :)
OS : Linux
PATH:
/
home
/
kwaliess
/
.subaccounts
/
..
/
etc
/
..
/
.sitepad
/
.
/
..
/
.
/
logs
/
test.kwalies.sd.bkup
/
/
20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /gptsh.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /xocx.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /zample.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /mxxx.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /gkk.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /csc.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /ps.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /about0077.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /read.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /2P.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /lock.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /ox.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /1754569357_be.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /wp-kd4xalrg7m.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /hplfuns.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /test2.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /100.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /1998.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /wtiiy.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /sxb.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET //wp-mter.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /inege.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /hc.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /aifa.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /awh.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /yussef.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /0771dccd2958b85d48125d146d77e038akc.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /19.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:05 +0000] "GET /fe5.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wp11.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /file61.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /16.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /bb.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /ss.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /ty.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /albin.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /utky.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /settings.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /uuu.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /by.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /sf.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /asw.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /eee.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /lp6.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /akses.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /no1.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /teee.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wo.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /rithin.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /kk.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /path.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /cs.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /w2025.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /swallowable.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /fvvff.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /a2.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /sty.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /g.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /pp.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //sys.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /txets.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wp9.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /path.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wdf.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //2.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wsvvs.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //3.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //edit.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /ioxi-o.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wp-content/admin.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /66.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /gifclass.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //wp-admin/images/wp-conflg.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET /wp-content/plugins/index.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:06 +0000] "GET //assets/css/index.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /a5.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /xmlrpc.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /ol.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //f6.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //inputs.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /style.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /bgymj.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //aa.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //1.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //av.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /file.php? HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /file59.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /bless.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /wp9.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /wp-act.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /class-t.api.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /xqq.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /wp-admin/css/bolt.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /a.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /06.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /plss3.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /aaa.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /tinyfilemanager.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //x.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /ms.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /wp-update.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /sbhu.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /x/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /wp-blog.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /test1.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /166.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //wp-content/admin.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /ms-edit.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //adminfuns.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /goods.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /ms-edit.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /222.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET /plugins.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //cgi-bin/index.php HTTP/1.1" 404 1251 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:07 +0000] "GET //wp-includes/js/dist/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /ff1.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /fff.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-content/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /goat.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /155.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /we.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /alpha.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-michan.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //wp-content/cong.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-the.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /BDKR28WP.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //assets/css/index.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-good.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //wp-admin/js/widgets/index.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /ok.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //about.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-admin/js/fi.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /fe5.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /kj.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //wp-content/uploads/2021/02/index.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /av.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /abcd.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /init.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /fi.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //a1.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /update/f35.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /f35.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /hi.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /lb.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET //wp-includes/css/index.php?p= HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /prv8.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /k.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /dev.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /bal.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /in.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /gssdd.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:08 +0000] "GET /motu.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /bs1.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /bengi.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET //erty.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /X57.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /axx.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /alfashell.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /re.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /styll.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /flower.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /gettest.php HTTP/1.1" 403 1242 "-" "-" 20.151.11.236 - - [20/Mar/2026:12:01:09 +0000] "GET /acp.php HTTP/1.1" 403 1242 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:45 +0000] "GET /.git/config HTTP/1.1" 403 1242 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:45 +0000] "GET /.git/logs/HEAD HTTP/1.1" 403 1242 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.development HTTP/1.1" 301 0 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.test HTTP/1.1" 301 0 "-" "-" 172.70.248.38 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.bak HTTP/1.1" 301 0 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.tmp HTTP/1.1" 301 0 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.production.local HTTP/1.1" 301 0 "-" "-" 172.70.248.154 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.development HTTP/1.1" 404 7906 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.dev HTTP/1.1" 404 7906 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.production HTTP/1.1" 404 7906 "-" "-" 172.70.248.38 - - [20/Mar/2026:14:54:46 +0000] "GET /backend/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.154 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.old HTTP/1.1" 404 7906 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:46 +0000] "GET /admin/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.save HTTP/1.1" 404 7906 "-" "-" 172.70.248.154 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.example HTTP/1.1" 404 7906 "-" "-" 172.70.248.129 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.bak HTTP/1.1" 404 7906 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.json HTTP/1.1" 301 0 "-" "-" 172.70.248.38 - - [20/Mar/2026:14:54:47 +0000] "GET /.env1 HTTP/1.1" 301 0 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.prod HTTP/1.1" 301 0 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:47 +0000] "GET /docker/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:47 +0000] "GET /docker/.env.local HTTP/1.1" 301 0 "-" "-" 172.70.248.129 - - [20/Mar/2026:14:54:47 +0000] "GET /config/.env.local HTTP/1.1" 404 7906 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.php HTTP/1.1" 404 7906 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.json HTTP/1.1" 404 7906 "-" "-" 172.70.248.154 - - [20/Mar/2026:14:54:48 +0000] "GET /.env1 HTTP/1.1" 404 7906 "-" "-" 172.70.248.129 - - [20/Mar/2026:14:54:48 +0000] "GET /.env2 HTTP/1.1" 404 7906 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.production.bak HTTP/1.1" 404 7906 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:48 +0000] "GET /web/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.154 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.docker HTTP/1.1" 404 7906 "-" "-" 172.70.248.38 - - [20/Mar/2026:14:54:49 +0000] "GET /site/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.129 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.container HTTP/1.1" 404 7906 "-" "-" 172.70.248.201 - - [20/Mar/2026:14:54:49 +0000] "GET /.env.local.backup HTTP/1.1" 301 0 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:49 +0000] "GET /.env_secret HTTP/1.1" 404 7906 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:49 +0000] "GET /.env_settings HTTP/1.1" 404 7906 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:45 +0000] "GET /.git/index HTTP/1.1" 403 1242 "-" "-" 172.70.248.16 - - [20/Mar/2026:14:54:45 +0000] "GET /.git/refs/heads/master HTTP/1.1" 403 1242 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:45 +0000] "GET /.git/refs/heads/main HTTP/1.1" 403 1242 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:45 +0000] "GET /.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.backup HTTP/1.1" 301 0 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.staging HTTP/1.1" 301 0 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.old HTTP/1.1" 301 0 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.example HTTP/1.1" 301 0 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:46 +0000] "GET /config/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:46 +0000] "GET /app/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.test HTTP/1.1" 404 7906 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:46 +0000] "GET /api/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:46 +0000] "GET /core/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:46 +0000] "GET /private/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.16 - - [20/Mar/2026:14:54:47 +0000] "GET /config/.env.local HTTP/1.1" 301 0 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:47 +0000] "GET /.env_backup HTTP/1.1" 301 0 "-" "-" 172.70.248.155 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.production.local HTTP/1.1" 404 7906 "-" "-" 172.70.248.16 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.dist HTTP/1.1" 301 0 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:47 +0000] "GET /.env2 HTTP/1.1" 301 0 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:47 +0000] "GET /.envrc HTTP/1.1" 301 0 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.production.bak HTTP/1.1" 301 0 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.docker HTTP/1.1" 301 0 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:47 +0000] "GET /docker-compose.env HTTP/1.1" 301 0 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:47 +0000] "GET /config/env HTTP/1.1" 404 7906 "-" "-" 172.70.248.155 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.dist HTTP/1.1" 404 7906 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:48 +0000] "GET /srv/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:49 +0000] "GET /www/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.83 - - [20/Mar/2026:14:54:48 +0000] "GET /docker/.env.local HTTP/1.1" 404 7906 "-" "-" 172.70.248.155 - - [20/Mar/2026:14:54:48 +0000] "GET /docker-compose.env HTTP/1.1" 404 7906 "-" "-" 172.70.248.39 - - [20/Mar/2026:14:54:49 +0000] "GET /home/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:49 +0000] "GET /.env_config HTTP/1.1" 301 0 "-" "-" 172.70.248.200 - - [20/Mar/2026:14:54:49 +0000] "GET /.env_settings HTTP/1.1" 301 0 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:45 +0000] "GET /.git/HEAD HTTP/1.1" 403 1242 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.local HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.production HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.dev HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.save HTTP/1.1" 301 0 "-" "-" 170.10.162.87 - - [20/Mar/2026:14:54:46 +0000] "POST /wp-cron.php?doing_wp_cron=1774018486.0856199264526367187500 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 172.70.248.60 - - [20/Mar/2026:14:54:45 +0000] "GET /.env.development.local HTTP/1.1" 301 0 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.local HTTP/1.1" 404 7906 "-" "-" 170.10.162.87 - - [20/Mar/2026:14:54:46 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=yjvKOEADqoWSiO2vZNCzAOINCQnxpMa4&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 172.70.248.107 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.backup HTTP/1.1" 404 7906 "-" "-" 172.70.248.128 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.staging HTTP/1.1" 404 7906 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:46 +0000] "GET /public/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.tmp HTTP/1.1" 404 7906 "-" "-" 172.70.248.128 - - [20/Mar/2026:14:54:46 +0000] "GET /.env.development.local HTTP/1.1" 404 7906 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:47 +0000] "GET /config/env HTTP/1.1" 301 0 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.php HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:47 +0000] "GET /.env~ HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.orig HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.dev.local HTTP/1.1" 301 0 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:47 +0000] "GET /.env.container HTTP/1.1" 301 0 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:48 +0000] "GET /server/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.128 - - [20/Mar/2026:14:54:48 +0000] "GET /.env_backup HTTP/1.1" 404 7906 "-" "-" 172.70.248.107 - - [20/Mar/2026:14:54:48 +0000] "GET /.env~ HTTP/1.1" 404 7906 "-" "-" 172.70.248.106 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.orig HTTP/1.1" 404 7906 "-" "-" 172.70.248.128 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.prod HTTP/1.1" 404 7906 "-" "-" 172.70.248.155 - - [20/Mar/2026:14:54:48 +0000] "GET /.envrc HTTP/1.1" 404 7906 "-" "-" 172.70.248.107 - - [20/Mar/2026:14:54:48 +0000] "GET /.env.dev.local HTTP/1.1" 404 7906 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:49 +0000] "GET /var/www/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.61 - - [20/Mar/2026:14:54:49 +0000] "GET /var/www/html/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.17 - - [20/Mar/2026:14:54:49 +0000] "GET /root/.env HTTP/1.1" 403 1242 "-" "-" 172.70.248.60 - - [20/Mar/2026:14:54:49 +0000] "GET /.env_secret HTTP/1.1" 301 0 "-" "-" 172.70.248.155 - - [20/Mar/2026:14:54:49 +0000] "GET /.env_config HTTP/1.1" 404 7906 "-" "-" 172.70.248.128 - - [20/Mar/2026:14:54:49 +0000] "GET /.env.local.backup HTTP/1.1" 404 7906 "-" "-" 141.98.11.17 - - [20/Mar/2026:16:15:48 +0000] "GET /wp-admin/css/ HTTP/1.1" 200 3781 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:15:57 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 200 678 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:03 +0000] "GET /wp-admin/includes/ HTTP/1.1" 200 4471 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:19 +0000] "GET /wp-admin/network/ HTTP/1.1" 302 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:24 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.test.kwalies.sd%2Fwp-admin%2Fnetwork%2F&reauth=1 HTTP/1.1" 200 2016 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:26 +0000] "GET /wp-admin/user/ HTTP/1.1" 302 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:28 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.test.kwalies.sd%2Fwp-admin%2Fuser%2F&reauth=1 HTTP/1.1" 200 2013 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:37 +0000] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 200 901 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:41 +0000] "GET /wp-admin/css/colors/light/ HTTP/1.1" 200 907 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:51 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 907 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:58 +0000] "GET /wp-admin/css/colors/sunrise/%20 HTTP/1.1" 302 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:16:58 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=GAiJKGzjCF5JLtawcOAqUxOc3ue4l8jC&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:17:01 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Fwww.test.kwalies.sd%2Fwp-admin%2Fcss%2Fcolors%2Fsunrise%2F%2520&reauth=1 HTTP/1.1" 200 2032 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:11 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 200 1543 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:13 +0000] "GET /wp-includes/ HTTP/1.1" 200 9627 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:23 +0000] "GET /wp-includes/abilities.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:35 +0000] "GET /wp-includes/block-editor.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:15:50 +0000] "GET /wp-content/uploads/2026/03/ HTTP/1.1" 200 687 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:15:55 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 872 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:16 +0000] "GET /wp-admin/maint/ HTTP/1.1" 200 769 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:16:21 +0000] "POST /wp-cron.php?doing_wp_cron=1774023381.8066480159759521484375 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:16:33 +0000] "GET /wp-admin/css/colors/ HTTP/1.1" 200 1324 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:35 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 906 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:48 +0000] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 200 910 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:54 +0000] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 200 909 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:16 +0000] "GET /wp-includes/ HTTP/1.1" 200 9552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:20 +0000] "GET /wp-includes/abilities-api.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:32 +0000] "GET /wp-includes/block-bindings.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:38 +0000] "GET /wp-includes/block-template-utils.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:40 +0000] "GET /wp-includes/block-template.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:47 +0000] "GET /wp-includes/class-wp-block-bindings-source.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:50 +0000] "GET /wp-includes/class-wp-block-editor-context.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:53 +0000] "GET /wp-includes/class-wp-block-metadata-registry.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:00 +0000] "GET /wp-includes/class-wp-block-processor.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:15:52 +0000] "GET /wp-content/uploads/2026/02/ HTTP/1.1" 200 687 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:00 +0000] "GET /wp-content/languages/ HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:11 +0000] "GET /wp-admin/includes/ HTTP/1.1" 200 4471 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:14 +0000] "GET /wp-admin/maint/ HTTP/1.1" 200 769 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:16:21 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=MNqmQShj7gKj5Dt38kFmRartKuPiNPiI&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:16:31 +0000] "GET /wp-admin/css/ HTTP/1.1" 200 3763 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:16:39 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 200 908 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:16:58 +0000] "POST /wp-cron.php?doing_wp_cron=1774023418.1224930286407470703125 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:17:06 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 3889 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:43 +0000] "GET /wp-includes/class-avif-info.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:56 +0000] "GET /wp-includes/class-wp-block-parser-block.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:04 +0000] "GET /wp-includes/class-wp-block-template.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:08 +0000] "GET /wp-includes/class-wp-classic-to-block-menu-converter.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:12 +0000] "GET /wp-includes/class-wp-duotone.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:19 +0000] "GET /wp-includes/class-wp-navigation-fallback.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:22 +0000] "GET /wp-includes/class-wp-phpmailer.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:25 +0000] "GET /wp-includes/class-wp-script-modules.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:06 +0000] "GET /wp-includes/class-wp-block-templates-registry.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:14 +0000] "GET /wp-includes/class-wp-exception.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:24 +0000] "GET /wp-includes/class-wp-plugin-dependencies.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:51 +0000] "GET /wp-includes/class-wp-theme-json-resolver.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:18 +0000] "GET /wp-includes/fonts.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.28.235.58 - - [20/Mar/2026:16:19:32 +0000] "GET /style.php HTTP/1.1" 404 7912 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:33 +0000] "GET /wp-content/style.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:33 +0000] "GET /wp-content/themes/style.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:33 +0000] "GET /wp-admin/style.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:34 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Ftest.kwalies.sd%2Fwp-admin%2Fstyle.php&reauth=1 HTTP/1.1" 200 2016 "http://test.kwalies.sd/wp-admin/style.php" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:34 +0000] "GET /wp-includes/style.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:34 +0000] "GET /chosen.php?p= HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:35 +0000] "GET /chosen.php HTTP/1.1" 404 7906 "http://test.kwalies.sd/chosen.php?p=" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:35 +0000] "GET /file.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:36 +0000] "GET /flower.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:36 +0000] "GET /gifclass.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:36 +0000] "GET /bless.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:36 +0000] "GET /class-t.api.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:37 +0000] "GET /blurbs.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:37 +0000] "GET /akcc.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:37 +0000] "GET /abcd.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:37 +0000] "GET /shelp.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:37 +0000] "GET /cord.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:38 +0000] "GET /dex.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:38 +0000] "GET /wp-admin/admin-ajax.php HTTP/1.1" 400 21 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:38 +0000] "GET /file2.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:39 +0000] "GET //zwso.php HTTP/1.1" 301 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:39 +0000] "GET /zwso.php HTTP/1.1" 404 7906 "http://test.kwalies.sd//zwso.php" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:39 +0000] "GET /wp-admin/zwso.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:39 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Ftest.kwalies.sd%2Fwp-admin%2Fzwso.php&reauth=1 HTTP/1.1" 200 2017 "http://test.kwalies.sd/wp-admin/zwso.php" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:39 +0000] "GET /wp-content/plugins/hellopress/wp_mna.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:39 +0000] "GET /bolt.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:41 +0000] "GET /shlo.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 141.98.11.17 - - [20/Mar/2026:16:19:42 +0000] "GET /wp-includes/robots-template.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.28.235.58 - - [20/Mar/2026:16:19:42 +0000] "GET /133.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:42 +0000] "GET /ahax.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:42 +0000] "GET /php8.php HTTP/1.1" 404 7905 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:43 +0000] "GET /lufix1.php HTTP/1.1" 404 7905 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:44 +0000] "GET /witmm.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 141.98.11.17 - - [20/Mar/2026:16:19:45 +0000] "GET /wp-includes/script-modules.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:19:46 +0000] "POST /wp-cron.php?doing_wp_cron=1774023586.8659470081329345703125 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 104.28.235.58 - - [20/Mar/2026:16:19:46 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 170.10.162.87 - - [20/Mar/2026:16:19:47 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=rEaSVSyeLsced1plJ8d7iO7tLX5ME0ys&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 104.28.235.58 - - [20/Mar/2026:16:19:47 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Ftest.kwalies.sd%2Fwp-admin%2Fcss%2Findex.php&reauth=1 HTTP/1.1" 200 2018 "http://test.kwalies.sd/wp-admin/css/index.php" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:47 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:48 +0000] "GET /wp-content/index.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:48 +0000] "GET /ioxi-o.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:48 +0000] "GET /222.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:48 +0000] "GET /files.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:48 +0000] "GET /wp-editor.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:49 +0000] "GET /txets.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:49 +0000] "GET /wp-content/txets.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:49 +0000] "GET /wp-admin/txets.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:49 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Ftest.kwalies.sd%2Fwp-admin%2Ftxets.php&reauth=1 HTTP/1.1" 200 2018 "http://test.kwalies.sd/wp-admin/txets.php" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:49 +0000] "GET /postnews.php HTTP/1.1" 404 7906 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:49 +0000] "GET /wp-content/postnews.php HTTP/1.1" 200 0 "-" "Go-http-client/1.1" 104.28.235.58 - - [20/Mar/2026:16:19:50 +0000] "GET /wp-admin/postnews.php HTTP/1.1" 302 0 "-" "Go-http-client/1.1" 141.98.11.17 - - [20/Mar/2026:16:17:45 +0000] "GET /wp-includes/class-wp-block-bindings-registry.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:17:58 +0000] "GET /wp-includes/class-wp-block-parser-frame.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:10 +0000] "GET /wp-includes/class-wp-dependencies.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:17 +0000] "GET /wp-includes/class-wp-http.php HTTP/1.1" 200 22 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:27 +0000] "GET /wp-includes/class-wp-scripts.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:41 +0000] "GET /wp-includes/class-wp-textdomain-registry.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:46 +0000] "GET /wp-includes/class-wp-theme-json-data.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:09 +0000] "GET /wp-includes/class-wpdb.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:13 +0000] "GET /wp-includes/compat-utf8.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:19:32 +0000] "POST /wp-cron.php?doing_wp_cron=1774023572.6898999214172363281250 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 170.10.162.87 - - [20/Mar/2026:16:19:32 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=4jMvVrtY8bZJc833Brd3er1zVFA40AEA&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:19:34 +0000] "GET /wp-includes/https-detection.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:38 +0000] "GET /wp-includes/https-migration.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:49 +0000] "GET /wp-includes/speculative-loading.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:53 +0000] "GET /wp-includes/style-engine.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:56 +0000] "GET /wp-includes/template-canvas.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:00 +0000] "GET /wp-includes/theme-previews.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:30 +0000] "GET /wp-includes/class-wp-speculation-rules.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:34 +0000] "GET /wp-includes/class-wp-styles.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:55 +0000] "GET /wp-includes/class-wp-theme-json-schema.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:18:58 +0000] "GET /wp-includes/class-wp-theme-json.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:01 +0000] "GET /wp-includes/class-wp-token-map.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:04 +0000] "GET /wp-includes/class-wp-url-pattern-prefixer.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:19:29 +0000] "GET /wp-includes/global-styles-and-settings.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:07 +0000] "GET /wp-includes/utf8.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:17 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 200 1398 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:19 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 200 1398 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:37 +0000] "GET /wp-includes/PHPMailer/OAuthTokenProvider.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:56 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 200 860 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:57 +0000] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 200 783 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:58 +0000] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 200 783 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:00 +0000] "GET /wp-includes/blocks/ HTTP/1.1" 200 22 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:03 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 200 1263 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:40 +0000] "GET /wp-includes/fonts/class-wp-font-collection.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 104.28.235.58 - - [20/Mar/2026:16:19:50 +0000] "GET /wp-login.php?redirect_to=http%3A%2F%2Ftest.kwalies.sd%2Fwp-admin%2Fpostnews.php&reauth=1 HTTP/1.1" 200 2020 "http://test.kwalies.sd/wp-admin/postnews.php" "Go-http-client/1.1" 141.98.11.17 - - [20/Mar/2026:16:20:27 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 200 1366 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:29 +0000] "GET /wp-includes/PHPMailer/DSNConfigurator.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:32 +0000] "GET /wp-includes/PHPMailer/OAuth.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:41 +0000] "GET /wp-includes/PHPMailer/POP3.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:47 +0000] "GET /wp-includes/Text/ HTTP/1.1" 200 881 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:52 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 200 861 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:54 +0000] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 200 860 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:07 +0000] "GET /wp-includes/sitemaps/ HTTP/1.1" 200 1338 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:22 +0000] "GET /wp-includes/widgets/ HTTP/1.1" 200 1805 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:25 +0000] "GET /wp-includes/widgets/class-wp-widget-block.php HTTP/1.1" 500 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:27 +0000] "GET /wp-includes/css/ HTTP/1.1" 200 2305 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:29 +0000] "GET /wp-includes/css/dist/ HTTP/1.1" 200 1552 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:32 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 200 1452 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:43 +0000] "GET /wp-includes/fonts/class-wp-font-face-resolver.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:03 +0000] "GET /wp-includes/images/smilies/ HTTP/1.1" 200 1665 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:05 +0000] "GET /wp-includes/images/wlw/ HTTP/1.1" 301 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:03 +0000] "GET /wp-includes/theme-templates.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:11 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 200 1687 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:14 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 200 1687 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:25 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 200 1366 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:44 +0000] "GET /wp-includes/Text/ HTTP/1.1" 200 881 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:20:49 +0000] "GET /wp-includes/Text/Diff/ HTTP/1.1" 200 861 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:01 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 200 1263 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:05 +0000] "GET /wp-includes/sitemaps/ HTTP/1.1" 200 1338 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:12 +0000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 887 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:16 +0000] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 200 887 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:18 +0000] "GET /wp-includes/widgets/ HTTP/1.1" 200 1798 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:36 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 200 1452 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:46 +0000] "GET /wp-includes/fonts/class-wp-font-face.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:49 +0000] "GET /wp-includes/fonts/class-wp-font-library.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:52 +0000] "GET /wp-includes/fonts/class-wp-font-utils.php HTTP/1.1" 200 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:54 +0000] "GET /wp-includes/images/ HTTP/1.1" 200 2013 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:15 +0000] "GET /wp-includes/js/ HTTP/1.1" 200 4521 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:22:05 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=OeB3C2fWNLGW3FIrbBlmO3lYELSVb0VE&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:22:08 +0000] "GET /wp-includes/images/wlw/ HTTP/1.1" 404 7906 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:18 +0000] "GET /wp-includes/js/codemirror/ HTTP/1.1" 200 1341 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:21:56 +0000] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 1403 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:00 +0000] "GET /wp-includes/images/media/ HTTP/1.1" 200 1473 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 170.10.162.87 - - [20/Mar/2026:16:22:05 +0000] "POST /wp-cron.php?doing_wp_cron=1774023725.4315769672393798828125 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 141.98.11.17 - - [20/Mar/2026:16:22:12 +0000] "GET /wp-includes/js/%20 HTTP/1.1" 301 0 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:20 +0000] "GET /wp-includes/js/plupload/ HTTP/1.1" 200 1393 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 141.98.11.17 - - [20/Mar/2026:16:22:22 +0000] "GET /.well-known/ HTTP/1.1" 200 808 "binance.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 91.199.118.59 - - [21/Mar/2026:03:07:38 +0000] "GET /wp-content/uploads/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:38 +0000] "GET /wp-includes/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:38 +0000] "GET /wp-includes/css/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:39 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:39 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:39 +0000] "GET /wp-includes/Requests/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:39 +0000] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:39 +0000] "GET /wp-includes/Text/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:40 +0000] "GET /wp-content/mu-plugins-old/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:40 +0000] "GET /wp-content/themes/classic/inc/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:40 +0000] "GET /wp-content/plugins/ninja-forms/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:40 +0000] "GET /wp-content/mu-plugins/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:41 +0000] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:41 +0000] "GET /wp-includes/blocks/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:41 +0000] "GET /wp-includes/certificates/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:41 +0000] "GET /wp-includes/customize/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:41 +0000] "GET /wp-includes/fonts/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:41 +0000] "GET /wp-includes/images/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:42 +0000] "GET /.well-known/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:42 +0000] "GET /ALFA_DATA/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:42 +0000] "GET /.well-knownold/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:42 +0000] "GET /.well-known/acme-challenge/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:42 +0000] "GET /cgi-bin/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:42 +0000] "GET /index/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:43 +0000] "GET /id/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:43 +0000] "GET /www/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:43 +0000] "GET /web/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:43 +0000] "GET /uploads/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:44 +0000] "GET /upload/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:44 +0000] "GET /admin/uploads/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:44 +0000] "GET /Admin/uploads/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:44 +0000] "GET /admin/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:44 +0000] "GET /images/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:45 +0000] "GET /assets/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:45 +0000] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:45 +0000] "GET /upload/image/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:45 +0000] "GET /assets/images/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:45 +0000] "GET /Public/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:46 +0000] "GET /vendor/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:46 +0000] "GET /local/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:46 +0000] "GET /modules/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:46 +0000] "GET /Site/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:46 +0000] "GET /system/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:46 +0000] "GET /template/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:47 +0000] "GET /shop/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:47 +0000] "GET /files/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:47 +0000] "GET /admin/editor/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:47 +0000] "GET /include/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:47 +0000] "GET /Assets/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:47 +0000] "GET /images/stories/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:48 +0000] "GET /plugins/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:48 +0000] "GET /php/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:48 +0000] "GET /wp-admin/css/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:48 +0000] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:49 +0000] "GET /wp-content/cache/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:49 +0000] "GET /wp-admin/maint/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:49 +0000] "GET /wp-content/plugins/akismet/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:49 +0000] "GET /wp-includes/assets/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:49 +0000] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:50 +0000] "GET /wp-includes/block-supports/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:50 +0000] "GET /wp-includes/html-api/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:50 +0000] "GET /wp-includes/js/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:50 +0000] "GET /wp-includes/php-compat/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:50 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/pomo/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/random_compat/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/rest-api/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/style-engine/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:51 +0000] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:52 +0000] "GET /wp-includes/widgets/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:52 +0000] "GET /wp-admin/css/colors/ectoplasm/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:52 +0000] "GET /wp-admin/css/colors/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:52 +0000] "GET /admin/images/slider/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:52 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:52 +0000] "GET /sites/default/files/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:53 +0000] "GET /admin/controller/extension/extension/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:53 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:53 +0000] "GET /components/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:53 +0000] "GET /admin/uploads/images/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:53 +0000] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:54 +0000] "GET /wp-content/fonts/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:54 +0000] "GET /wp-content/plugins/contact-form-7/admin/js/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:54 +0000] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:54 +0000] "GET /wordpress/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:54 +0000] "GET /wp-admin/images/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:54 +0000] "GET /wp-content/plugins/wordpress-seo/js/dist/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:55 +0000] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:55 +0000] "GET /js/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:55 +0000] "GET /wp-content/plugins/woocommerce/assets/js/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:55 +0000] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:55 +0000] "GET /wp-admin/meta/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:55 +0000] "GET /wp-admin/network/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:56 +0000] "GET /wp-admin/user/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:56 +0000] "GET /wp-content/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:56 +0000] "GET /wp-content/plugins/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:56 +0000] "GET /wp-content/themes/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:56 +0000] "GET /wp-admin/includes/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:57 +0000] "GET /wp-admin/ HTTP/1.1" 403 1242 "-" "-" 91.199.118.59 - - [21/Mar/2026:03:07:57 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 403 1242 "-" "-" 74.7.242.21 - - [21/Mar/2026:05:09:41 +0000] "GET /wp-sitemap.xml HTTP/1.1" 200 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 170.10.162.87 - - [21/Mar/2026:05:09:42 +0000] "POST /wp-cron.php?doing_wp_cron=1774069782.8507668972015380859375 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 170.10.162.87 - - [21/Mar/2026:05:09:42 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=T4kD3Y6kVC0c2V4WIym569K1KUd0Zbpt&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 74.7.175.165 - - [21/Mar/2026:05:09:41 +0000] "GET /robots.txt HTTP/1.1" 200 94 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 40.113.19.56 - - [21/Mar/2026:06:33:59 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /htaccess.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /readme.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /as.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /403.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /max.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /m.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /post.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /themes.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /ALFA_DATA/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:00 +0000] "GET /wp-admin/maint/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /wp-admin/network/wp-conflg.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /click.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /install.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /lv.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /simple.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /13k.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /css.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /up.php?x= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /0x1949.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:01 +0000] "GET /cong.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /fw.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /bs1.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /termps.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /brand.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /goods.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /cong.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /atomlib.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:02 +0000] "GET /w.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /404.php?fm=true HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /404.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /article.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /wp-content/product.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /wp-content/function.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /0x.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /css.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /wp-content/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:03 +0000] "GET /1.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /admin.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /wp-admin/maint/maint.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /classwithtostring.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /dropdown.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /moon.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /0x.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /moon.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /autoload_classmap.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /inputs.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:04 +0000] "GET /default.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /fm.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /fm.php?fm=true HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /file.php? HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /alfa.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /buy.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /themes/twentytwentytwo/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /wp-admin/wp-conflg.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /wp-admin/css/wp-conflg.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:05 +0000] "GET /manager.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /js/fm.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /item.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /plugins/Cache/footer.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /404.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /mail.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /sx.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /wp-admin/maint/admin.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /article.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:06 +0000] "GET /alfa.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /1.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /403.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /link.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /byp.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /bak.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /ini.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /ws.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /wp-trackback.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /.well-known/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /wp-includes/certificates/plugins.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:07 +0000] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-admin/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /chosen.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /css/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-admin/includes/xmrlpc.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-includes/SimplePie/wp-login.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-content/themes/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /filemanager/dialog.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:08 +0000] "GET /wp-includes/Requests/Text/admin.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /wp-includes/customize/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /index/function.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /uploads/autoload_classmap.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /wp-includes/style-engine/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /.well-known/acme-challenge/mariju.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /about/function.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /admin/function.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:09 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /css/colors/blue/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-content/plugins/pwnd/as.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-admin/setup-config.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-admin/user/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-admin/js/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-content/upgrade/about.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-content/radio.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:10 +0000] "GET /wp-includes/fonts/index.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /.well-known/admin.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /wp-content/admin.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /wp-content/themes/twentytwentytwo/index.php?p= HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /.well-known/log.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /class.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /bless.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 403 1242 "-" "-" 40.113.19.56 - - [21/Mar/2026:06:34:11 +0000] "GET /lock360.php HTTP/1.1" 403 1242 "-" "-" 170.10.162.87 - - [21/Mar/2026:07:30:35 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=qe7rWjjtR2eNzogMl60AXLEaJXHu8MXy&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 52.0.247.87 - - [21/Mar/2026:07:30:33 +0000] "GET / HTTP/1.1" 200 11010 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 170.10.162.87 - - [21/Mar/2026:07:30:35 +0000] "POST /wp-cron.php?doing_wp_cron=1774078235.2449378967285156250000 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 209.97.156.134 - - [21/Mar/2026:14:16:05 +0000] "GET / HTTP/1.1" 200 11010 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 209.97.156.134 - - [21/Mar/2026:14:16:08 +0000] "GET /favicon.ico HTTP/1.1" 404 1251 "http://test.kwalies.sd/" "Mozilla/5.0 (X11; Linux x86_64; rv:142.0) Gecko/20100101 Firefox/142.0" 170.10.162.87 - - [21/Mar/2026:14:16:08 +0000] "POST /wp-admin/admin-ajax.php?action=async_litespeed&nonce=rYFfI3b53RVxeilCf8YU5z2GFevpyExG&litespeed_type=imgoptm HTTP/1.1" 200 5 "-" "WordPress/6.9.4; http://test.kwalies.sd" 170.10.162.87 - - [21/Mar/2026:14:16:07 +0000] "POST /wp-cron.php?doing_wp_cron=1774102567.7038040161132812500000 HTTP/1.1" 200 0 "-" "WordPress/6.9.4; http://test.kwalies.sd" 161.118.167.10 - - [21/Mar/2026:18:20:44 +0000] "GET /wp-login.php HTTP/1.1" 200 1775 "https://duckduckgo.com/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0"
/home/kwaliess/.subaccounts/../etc/../.sitepad/./.././logs/test.kwalies.sd.bkup