File: /storage/v12674/lcaginesisstore/logs/lcaginesisstore.log
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:00:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785628802.6598839759826660156250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:00:02:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785628933.3758471012115478515625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
69.57.172.96 - - - 200 BYPASS - - [02/Aug/2026:00:02:14 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.96, 69.57.172.96, 69.57.172.96, 69.57.172.96"
69.57.172.96 - _uid=0100007F06896E6A4305FF06020F0303 - 200 BYPASS - - [02/Aug/2026:00:02:15 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.96, 69.57.172.96, 69.57.172.96, 69.57.172.96"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:28 +0000] "GET /--wp-lgj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:28 +0000] "GET /.tmb/admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:28 +0000] "GET /.tmb/la.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 BYPASS - - [02/Aug/2026:00:20:28 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:29 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:29 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:29 +0000] "GET /.well-known/991176.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/caches.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:32 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:32 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:32 +0000] "GET /_podt.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:32 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:33 +0000] "GET /aahana/json.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:33 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:33 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:33 +0000] "GET /admin.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:34 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:34 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:34 +0000] "GET /ahax.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /alera/alpha.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /alfa-rex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /app.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /appwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:36 +0000] "GET /astra/inc/fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:36 +0000] "GET /autoload_classmap.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:36 +0000] "GET /bless.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:36 +0000] "GET /cgi-bin/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:37 +0000] "GET /cgi-binwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:37 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:37 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:37 +0000] "GET /cloud.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /co.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /codemirror/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /colors/blue/info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:39 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:39 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 BYPASS - - [02/Aug/2026:00:20:39 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:39 +0000] "GET /dex.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /docsbypass.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /env.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /eror.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:41 +0000] "GET /file4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:41 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:41 +0000] "GET /form.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:00:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785630602.5497438907623291015625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:02 +0000] "GET /--wp-lgj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:02 +0000] "GET /.tmb/admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:03 +0000] "GET /.tmb/la.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 BYPASS - - [02/Aug/2026:00:38:03 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:03 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:04 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:04 +0000] "GET /.well-known/991176.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:04 +0000] "GET /.well-known/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:04 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:05 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:05 +0000] "GET /.well-known/caches.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:05 +0000] "GET /.well-known/elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:05 +0000] "GET /.well-known/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:06 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:06 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:06 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:06 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:07 +0000] "GET /_podt.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:07 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:07 +0000] "GET /aahana/json.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:07 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:08 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:08 +0000] "GET /admin.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:08 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:08 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:09 +0000] "GET /ahax.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:09 +0000] "GET /alera/alpha.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:09 +0000] "GET /alfa-rex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:10 +0000] "GET /app.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:10 +0000] "GET /appwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:10 +0000] "GET /astra/inc/fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:10 +0000] "GET /autoload_classmap.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:11 +0000] "GET /bless.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:11 +0000] "GET /cgi-bin/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:11 +0000] "GET /cgi-binwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:11 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:12 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:12 +0000] "GET /cloud.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:12 +0000] "GET /co.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:12 +0000] "GET /codemirror/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:13 +0000] "GET /colors/blue/info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:13 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:13 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:13 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 BYPASS - - [02/Aug/2026:00:38:14 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:14 +0000] "GET /dex.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:14 +0000] "GET /docsbypass.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:14 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:15 +0000] "GET /env.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:15 +0000] "GET /eror.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:15 +0000] "GET /file4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:15 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
172.213.232.128 - - - 404 HIT - - [02/Aug/2026:00:38:16 +0000] "GET /form.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "172.213.232.128, 172.213.232.128, 172.213.232.128, 172.213.232.128"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:01:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785632403.0000019073486328125000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:01:01:35 +0000] "POST /wp-cron.php?doing_wp_cron=1785632495.0642249584197998046875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
198.38.94.67 - - - 200 BYPASS - - [02/Aug/2026:01:01:35 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67"
198.38.94.67 - _uid=0100007FEF966E6A4305FF06026C0A03 - 200 BYPASS - - [02/Aug/2026:01:01:37 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.67, 198.38.94.67, 198.38.94.67, 198.38.94.67"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:01:02:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785632537.0324161052703857421875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
94.154.43.185 - - - 200 MISS - - [02/Aug/2026:01:02:17 +0000] "GET / HTTP/1.1" 228253 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" "94.154.43.185, 94.154.43.185, 94.154.43.185, 94.154.43.185"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:01:11:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785633101.4502310752868652343750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
164.138.220.142 - - - 200 BYPASS - - [02/Aug/2026:01:11:42 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "164.138.220.142, 164.138.220.142, 164.138.220.142, 164.138.220.142"
164.138.220.142 - _uid=0100007F4E996E6A4305FF06020A0B03 - 200 BYPASS - - [02/Aug/2026:01:11:43 +0000] "POST /wp-login.php HTTP/1.1" 2885 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "164.138.220.142, 164.138.220.142, 164.138.220.142, 164.138.220.142"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:01:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785634202.6585419178009033203125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:01:59:26 +0000] "POST /wp-cron.php?doing_wp_cron=1785635965.7733020782470703125000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
72.167.132.114 - - - 200 BYPASS - - [02/Aug/2026:01:59:26 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
72.167.132.114 - _uid=0100007F7EA46E6A4305FF0602BC0F03 - 200 BYPASS - - [02/Aug/2026:01:59:27 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:02:30:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785637802.4166150093078613281250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
172.213.225.181 - - - 403 BYPASS - - [02/Aug/2026:02:36:27 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F2BAD6E6A4305FF0602831203 - 404 HIT - - [02/Aug/2026:02:36:27 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:28 +0000] "GET /x.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:28 +0000] "GET /mgrr.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:28 +0000] "GET /domvf.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:29 +0000] "GET /yup.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:29 +0000] "GET /X.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:30 +0000] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:30 +0000] "GET /gec.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:31 +0000] "GET /sky.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:31 +0000] "GET /fffm.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:32 +0000] "GET /sixxis.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:32 +0000] "GET /yj09.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:32 +0000] "GET /k.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:33 +0000] "GET /k2.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:33 +0000] "GET /w.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:33 +0000] "GET /fpwch.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:34 +0000] "GET /w2025.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:34 +0000] "GET /FWAZ.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:34 +0000] "GET /qterm.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:35 +0000] "GET /blurbs.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:35 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:36 +0000] "GET /xyn.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:36 +0000] "GET /ccc.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:37 +0000] "GET /get.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:37 +0000] "GET /images.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:37 +0000] "GET /alls.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:38 +0000] "GET /coffexium.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:38 +0000] "GET /red.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 403 BYPASS - - [02/Aug/2026:02:36:39 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 403 BYPASS - - [02/Aug/2026:02:36:39 +0000] "GET /wp-includes/Text/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 403 BYPASS - - [02/Aug/2026:02:36:40 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 403 BYPASS - - [02/Aug/2026:02:36:40 +0000] "GET /wp-content/index.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:41 +0000] "GET ///admin.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:41 +0000] "GET /177.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:41 +0000] "GET /199.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:42 +0000] "GET /file52.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:43 +0000] "GET /geck.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:43 +0000] "GET /biufile.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:43 +0000] "GET /dejavu.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:44 +0000] "GET /aaf.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:44 +0000] "GET /ha.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:45 +0000] "GET /hur.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:45 +0000] "GET /h02ugyh.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:46 +0000] "GET /155.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:46 +0000] "GET /ops.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:46 +0000] "GET /ingfo.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:47 +0000] "GET /error_log.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:47 +0000] "GET /koala.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 HIT - - [02/Aug/2026:02:36:47 +0000] "GET /mac.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:48 +0000] "GET /wefile.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 403 BYPASS - - [02/Aug/2026:02:36:48 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 403 BYPASS - - [02/Aug/2026:02:36:49 +0000] "GET /wp-admin/js/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:49 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:50 +0000] "GET /2P.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:51 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5A806E6AC8DD7D9F02907103 - 404 MISS - - [02/Aug/2026:02:36:51 +0000] "GET /system_log.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 403 BYPASS - - [02/Aug/2026:02:36:51 +0000] "GET /wp-admin/css/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 403 BYPASS - - [02/Aug/2026:02:36:52 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 MISS - - [02/Aug/2026:02:36:53 +0000] "GET /crgio.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 MISS - - [02/Aug/2026:02:36:53 +0000] "GET /pucci.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 403 BYPASS - - [02/Aug/2026:02:36:53 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 403 BYPASS - - [02/Aug/2026:02:36:54 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 MISS - - [02/Aug/2026:02:36:54 +0000] "GET /wp-temp.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 BYPASS - - [02/Aug/2026:02:36:55 +0000] "GET //wp-admin/js/index.php HTTP/1.1" 299 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 MISS - - [02/Aug/2026:02:36:55 +0000] "GET /puc.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 MISS - - [02/Aug/2026:02:36:56 +0000] "GET /dx.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 403 BYPASS - - [02/Aug/2026:02:36:56 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF2276E6AC8DD7D9F02875C03 - 404 MISS - - [02/Aug/2026:02:36:57 +0000] "GET /7.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F976B6E6AC8DD7D9F02E46B03 - 404 HIT - - [02/Aug/2026:02:36:57 +0000] "GET /8.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F976B6E6AC8DD7D9F02E46B03 - 404 HIT - - [02/Aug/2026:02:36:58 +0000] "GET /1.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F976B6E6AC8DD7D9F02E46B03 - 404 HIT - - [02/Aug/2026:02:36:58 +0000] "GET /about.php HTTP/1.1" 403 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:36:58 +0000] "GET //admin.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:36:59 +0000] "GET //edit.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:36:59 +0000] "GET /wp-content/admin.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:00 +0000] "GET /inputs.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 HIT - - [02/Aug/2026:02:37:00 +0000] "GET //av.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 HIT - - [02/Aug/2026:02:37:00 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:01 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:01 +0000] "GET /wp-blog.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:02 +0000] "GET //wp-includes/js/jquery/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:02 +0000] "GET //wp-content/admin.php HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:03 +0000] "GET //adminfuns.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:03 +0000] "GET /goods.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:03 +0000] "GET /ms-edit.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 HIT - - [02/Aug/2026:02:37:04 +0000] "GET /222.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:04 +0000] "GET //cgi-bin/index.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:04 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 HIT - - [02/Aug/2026:02:37:05 +0000] "GET /BDKR28WP.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:05 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:06 +0000] "GET /wp-content/uploads/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:06 +0000] "GET /wp.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:07 +0000] "GET //abcd.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:07 +0000] "GET //a1.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:08 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:08 +0000] "GET //cgi-bin/admin.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 403 BYPASS - - [02/Aug/2026:02:37:09 +0000] "GET /wp-content/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:10 +0000] "GET /simple.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F70916E6A4305FF06022C0803 - 404 MISS - - [02/Aug/2026:02:37:10 +0000] "GET /xxx.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FEB276E6AC8DD7D9F02745C03 - 404 MISS - - [02/Aug/2026:02:37:10 +0000] "GET /hypo.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - - - 403 BYPASS - - [02/Aug/2026:02:37:11 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 385 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F57AD6E6A4305FF0602891203 - 404 MISS - - [02/Aug/2026:02:37:11 +0000] "GET /chosen.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F57AD6E6A4305FF0602891203 - 403 BYPASS - - [02/Aug/2026:02:37:11 +0000] "GET //wp-includes/block-bindings/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F57AD6E6A4305FF0602891203 - 404 MISS - - [02/Aug/2026:02:37:12 +0000] "GET /als.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F57AD6E6A4305FF0602891203 - 404 MISS - - [02/Aug/2026:02:37:13 +0000] "GET /pol.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F57AD6E6A4305FF0602891203 - 404 MISS - - [02/Aug/2026:02:37:13 +0000] "GET /file5.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F986B6E6AC8DD7D9F02E56B03 - 404 MISS - - [02/Aug/2026:02:37:13 +0000] "GET /file.php? HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F986B6E6AC8DD7D9F02E56B03 - 404 MISS - - [02/Aug/2026:02:37:14 +0000] "GET /admin.php? HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F986B6E6AC8DD7D9F02E56B03 - 404 MISS - - [02/Aug/2026:02:37:14 +0000] "GET /aa2.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F986B6E6AC8DD7D9F02E56B03 - 404 MISS - - [02/Aug/2026:02:37:15 +0000] "GET /ccou.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F986B6E6AC8DD7D9F02E56B03 - 404 MISS - - [02/Aug/2026:02:37:15 +0000] "GET /dr.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - - - 404 MISS - - [02/Aug/2026:02:37:16 +0000] "GET /xamp.php HTTP/1.1" 433 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F5CAD6E6A4305FF06028A1203 - 404 HIT - - [02/Aug/2026:02:37:16 +0000] "GET /bless.php HTTP/1.1" 403 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F73916E6A4305FF0602370803 - 404 MISS - - [02/Aug/2026:02:37:16 +0000] "GET /file25.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F73916E6A4305FF0602370803 - 404 MISS - - [02/Aug/2026:02:37:17 +0000] "GET /file6.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F73916E6A4305FF0602370803 - 404 MISS - - [02/Aug/2026:02:37:17 +0000] "GET /a2.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F78AB6D6AC8DD7D9F02712E03 - 404 MISS - - [02/Aug/2026:02:37:18 +0000] "GET /file15.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F78AB6D6AC8DD7D9F02712E03 - 404 MISS - - [02/Aug/2026:02:37:18 +0000] "GET /f35.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:02:37:20 +0000] "POST /wp-cron.php?doing_wp_cron=1785638239.9183030128479003906250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 200 MISS - - [02/Aug/2026:02:37:20 +0000] "GET /wp-load.php HTTP/1.1" 295 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 404 MISS - - [02/Aug/2026:02:37:21 +0000] "GET //xwpg.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 403 BYPASS - - [02/Aug/2026:02:37:21 +0000] "GET //wp-includes/assets/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 403 BYPASS - - [02/Aug/2026:02:37:22 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 297 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 404 MISS - - [02/Aug/2026:02:37:22 +0000] "GET /xstelth.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 302 BYPASS - - [02/Aug/2026:02:37:24 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 560 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 200 BYPASS - - [02/Aug/2026:02:37:25 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Flcaportalstoreg.liceclinicsofamerica.com%2Fwp-admin%2Fnetwork%2Fplugins.php&reauth=1 HTTP/1.1" 4853 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007FF1276E6AC8DD7D9F02835C03 - 404 HIT - - [02/Aug/2026:02:37:25 +0000] "GET /aaa.php HTTP/1.1" 403 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F6F916E6A4305FF0602290803 - 404 MISS - - [02/Aug/2026:02:37:26 +0000] "GET /gecko.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F6F916E6A4305FF0602290803 - 404 MISS - - [02/Aug/2026:02:37:26 +0000] "GET /pbck.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F6F916E6A4305FF0602290803 - 404 MISS - - [02/Aug/2026:02:37:27 +0000] "GET /xiugai.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F6F916E6A4305FF0602290803 - 404 MISS - - [02/Aug/2026:02:37:27 +0000] "GET /e.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - - - 404 MISS - - [02/Aug/2026:02:37:27 +0000] "GET /adminner.php HTTP/1.1" 433 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - - - 404 MISS - - [02/Aug/2026:02:37:28 +0000] "GET /file1221.php HTTP/1.1" 433 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:28 +0000] "GET /inx.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:29 +0000] "GET /qqqa.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:29 +0000] "GET /reviall.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:30 +0000] "GET /404.php?p= HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:30 +0000] "GET /File.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:31 +0000] "GET /fi22.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:31 +0000] "GET /zero.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:31 +0000] "GET /1xmomo.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:32 +0000] "GET /fmws.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 HIT - - [02/Aug/2026:02:37:32 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:33 +0000] "GET /123456789.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:33 +0000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:34 +0000] "GET /1PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:34 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:35 +0000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:35 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:35 +0000] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:36 +0000] "GET /xy9brdftkyivz9ij6rusmsCdefault.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:37 +0000] "GET /584062352875874akp.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 BYPASS - - [02/Aug/2026:02:37:37 +0000] "GET /wp-admin/js/wp-conflg.php?p= HTTP/1.1" 299 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:38 +0000] "GET /wp_motu_hxpzb.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:38 +0000] "GET /doodd.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 HIT - - [02/Aug/2026:02:37:39 +0000] "GET /media.php HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:39 +0000] "GET /aepmx.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:40 +0000] "GET /inso.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 HIT - - [02/Aug/2026:02:37:40 +0000] "GET /55.php?p= HTTP/1.1" 344 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
172.213.225.181 - _uid=0100007F68AD6E6A4305FF06028D1203 - 404 MISS - - [02/Aug/2026:02:37:40 +0000] "GET /borneo.php HTTP/1.1" 345 "-" "-" "172.213.225.181, 172.213.225.181, 172.213.225.181, 172.213.225.181"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:02:53:22 +0000] "POST /wp-cron.php?doing_wp_cron=1785639201.7581140995025634765625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
72.167.132.114 - - - 200 BYPASS - - [02/Aug/2026:02:53:22 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
72.167.132.114 - _uid=0100007F22B16E6A4305FF0602441403 - 200 BYPASS - - [02/Aug/2026:02:53:23 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:03:00:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785639602.4718570709228515625000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:03:30:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785641402.4753749370574951171875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.215.189.213 - - - 403 BYPASS - - [02/Aug/2026:03:51:09 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
20.215.189.213 - _uid=0100007FADBE6E6A4305FF06021E1803 - 404 MISS - - [02/Aug/2026:03:51:10 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 345 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
20.215.189.213 - _uid=0100007FADBE6E6A4305FF06021E1803 - 404 MISS - - [02/Aug/2026:03:51:10 +0000] "GET /IndoSec.php HTTP/1.1" 345 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
20.215.189.213 - _uid=0100007FADBE6E6A4305FF06021E1803 - 404 MISS - - [02/Aug/2026:03:51:11 +0000] "GET /1revo.php HTTP/1.1" 345 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
20.215.189.213 - _uid=0100007FADBE6E6A4305FF06021E1803 - 404 MISS - - [02/Aug/2026:03:51:11 +0000] "GET /loader.php HTTP/1.1" 345 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
20.215.189.213 - _uid=0100007FADBE6E6A4305FF06021E1803 - 404 MISS - - [02/Aug/2026:03:51:11 +0000] "GET /esp.php? HTTP/1.1" 345 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
20.215.189.213 - _uid=0100007FADBE6E6A4305FF06021E1803 - 404 MISS - - [02/Aug/2026:03:51:12 +0000] "GET /dj.php HTTP/1.1" 345 "-" "-" "20.215.189.213, 20.215.189.213, 20.215.189.213, 20.215.189.213"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785643202.6558101177215576171875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:33 +0000] "GET /1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:33 +0000] "GET /2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:33 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:33 +0000] "GET /10.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:34 +0000] "GET /13.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:34 +0000] "GET /100.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:34 +0000] "GET /222.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:35 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:35 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:35 +0000] "GET /al.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:35 +0000] "GET /alfa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:36 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:36 +0000] "GET /aa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:36 +0000] "GET /abc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:36 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:37 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:37 +0000] "GET /asus.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:37 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:37 +0000] "GET /atomlib.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:21:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785644499.4092431068420410156250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:21:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785644500.0476019382476806640625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:21:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785644500.9838039875030517578125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:41 +0000] "GET /alfa-rex.php7 HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:41 +0000] "GET /b.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:42 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:42 +0000] "GET /bless.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:42 +0000] "GET /class-t.api.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:42 +0000] "GET /cache.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:43 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:43 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:43 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 HIT - - [02/Aug/2026:04:21:43 +0000] "GET /chosen.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:44 +0000] "GET /doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:44 +0000] "GET /elp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:44 +0000] "GET /Exception-class.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:44 +0000] "GET /ee.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:45 +0000] "GET /edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:45 +0000] "GET /f35.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:45 +0000] "GET /fff.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:46 +0000] "GET /ff1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:46 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:46 +0000] "GET /file.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:47 +0000] "GET /goods.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:47 +0000] "GET /g.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:47 +0000] "GET /hplfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:47 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:48 +0000] "GET /in.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:48 +0000] "GET /info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 HIT - - [02/Aug/2026:04:21:48 +0000] "GET /inputs.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:48 +0000] "GET /item.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 HIT - - [02/Aug/2026:04:21:49 +0000] "GET /k.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:49 +0000] "GET /license.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:50 +0000] "GET /load.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:50 +0000] "GET /manager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:50 +0000] "GET /media.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:50 +0000] "GET /mar.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:51 +0000] "GET /my1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:51 +0000] "GET /mm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:51 +0000] "GET /network.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:52 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:52 +0000] "GET /0x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:52 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:52 +0000] "GET /oxshell.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:53 +0000] "GET /php8.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:53 +0000] "GET /p.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:53 +0000] "GET /php.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:54 +0000] "GET /past.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:54 +0000] "GET /root.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:54 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:54 +0000] "GET /sid3.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:55 +0000] "GET /ss.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:55 +0000] "GET /sts.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:55 +0000] "GET /shell.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:56 +0000] "GET /setup-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:56 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:56 +0000] "GET /up.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:56 +0000] "GET /ultra.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:57 +0000] "GET /vv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:57 +0000] "GET /V5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:57 +0000] "GET /wp-user.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 HIT - - [02/Aug/2026:04:21:57 +0000] "GET /wp-blog.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 HIT - - [02/Aug/2026:04:21:58 +0000] "GET /wp.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:58 +0000] "GET /worksec.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:58 +0000] "GET /wp-themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:21:59 +0000] "GET /wp-signin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:00 +0000] "GET /wp-blog-header.php HTTP/1.1" 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:02 +0000] "GET /wp-links-opml HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:02 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:02 +0000] "GET /wsa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:03 +0000] "GET /w.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 HIT - - [02/Aug/2026:04:22:03 +0000] "GET /x.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:03 +0000] "GET /xx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 403 BYPASS - - [02/Aug/2026:04:22:03 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
74.248.33.65 - - - 404 MISS - - [02/Aug/2026:04:22:04 +0000] "GET /y.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "74.248.33.65, 74.248.33.65, 74.248.33.65, 74.248.33.65"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:30:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785645002.1051139831542968750000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
5.175.189.113 - - - 404 MISS - - [02/Aug/2026:04:51:18 +0000] "GET /install.php HTTP/1.1" 433 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 HIT - - [02/Aug/2026:04:51:18 +0000] "GET /setup-config.php HTTP/1.1" 491 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:18 +0000] "GET /wordpress/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:18 +0000] "GET /wordpress/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:19 +0000] "GET /wp/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:19 +0000] "GET /wp/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:19 +0000] "GET /blog/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:19 +0000] "GET /blog/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:51:19 +0000] "POST /wp-cron.php?doing_wp_cron=1785646279.2355220317840576171875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
5.175.189.113 - - - 200 BYPASS - - [02/Aug/2026:04:51:19 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 1723 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:19 +0000] "GET /new/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:20 +0000] "GET /new/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:20 +0000] "GET /old/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:20 +0000] "GET /old/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:20 +0000] "GET /newsite/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:20 +0000] "GET /newsite/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:21 +0000] "GET /test/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:21 +0000] "GET /test/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:21 +0000] "GET /testing/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:21 +0000] "GET /testing/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:21 +0000] "GET /main/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:22 +0000] "GET /main/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:22 +0000] "GET /prod/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:22 +0000] "GET /prod/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:22 +0000] "GET /dev/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:22 +0000] "GET /dev/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:23 +0000] "GET /backup/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:23 +0000] "GET /backup/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:23 +0000] "GET /protal/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:23 +0000] "GET /protal/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 403 BYPASS - - [02/Aug/2026:04:51:23 +0000] "GET /wp-content/wp-admin/install.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 403 BYPASS - - [02/Aug/2026:04:51:24 +0000] "GET /wp-content/wp-admin/setup-config.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:24 +0000] "GET /core/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:24 +0000] "GET /core/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:24 +0000] "GET /home/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:25 +0000] "GET /home/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:25 +0000] "GET /demo/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:25 +0000] "GET /demo/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:25 +0000] "GET /old-site/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:25 +0000] "GET /old-site/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:26 +0000] "GET /staging/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:26 +0000] "GET /staging/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:26 +0000] "GET /wp-includes/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:26 +0000] "GET /wp-includes/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:27 +0000] "GET /admin/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:27 +0000] "GET /admin/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:27 +0000] "GET /wp-old/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:27 +0000] "GET /wp-old/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:27 +0000] "GET /wp-new/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:28 +0000] "GET /wp-new/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:28 +0000] "GET /wp1/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:28 +0000] "GET /wp1/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:28 +0000] "GET /wp2/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:29 +0000] "GET /wp2/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:29 +0000] "GET /wp2019/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:29 +0000] "GET /wp2019/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:29 +0000] "GET /wp2020/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:30 +0000] "GET /wp2020/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:30 +0000] "GET /wp2021/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:30 +0000] "GET /wp2021/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:30 +0000] "GET /wp2022/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:30 +0000] "GET /wp2022/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:31 +0000] "GET /wp2023/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:31 +0000] "GET /wp2023/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:31 +0000] "GET /wp2024/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:31 +0000] "GET /wp2024/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:32 +0000] "GET /wp2025/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:32 +0000] "GET /wp2025/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:32 +0000] "GET /wp2026/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:33 +0000] "GET /wp2026/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:33 +0000] "GET /2024/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:33 +0000] "GET /2024/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:33 +0000] "GET /2025/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:34 +0000] "GET /2025/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:34 +0000] "GET /2026/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:34 +0000] "GET /2026/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:34 +0000] "GET /bk/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:35 +0000] "GET /bk/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:35 +0000] "GET /site/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:35 +0000] "GET /site/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:36 +0000] "GET /web/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:36 +0000] "GET /web/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:36 +0000] "GET /cms/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:36 +0000] "GET /cms/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:37 +0000] "GET /beta/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:37 +0000] "GET /beta/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:37 +0000] "GET /live/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:38 +0000] "GET /live/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:38 +0000] "GET /app/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:38 +0000] "GET /app/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:38 +0000] "GET /shop/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:39 +0000] "GET /shop/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:39 +0000] "GET /store/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:39 +0000] "GET /store/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:40 +0000] "GET /portal/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:40 +0000] "GET /portal/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:41 +0000] "GET /news/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:41 +0000] "GET /news/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:41 +0000] "GET /info/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:42 +0000] "GET /info/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:42 +0000] "GET /migrate/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:42 +0000] "GET /migrate/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:43 +0000] "GET /preview/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:43 +0000] "GET /preview/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:44 +0000] "GET /sandbox/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:44 +0000] "GET /sandbox/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:44 +0000] "GET /stage/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:45 +0000] "GET /stage/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:45 +0000] "GET /tmp/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:46 +0000] "GET /tmp/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:46 +0000] "GET /temp/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:47 +0000] "GET /temp/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:47 +0000] "GET /v1/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:47 +0000] "GET /v1/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:48 +0000] "GET /v2/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:48 +0000] "GET /v2/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:49 +0000] "GET /WORDPRESS/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:49 +0000] "GET /WORDPRESS/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:49 +0000] "GET /WP/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:50 +0000] "GET /WP/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:50 +0000] "GET /BLOG/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:51 +0000] "GET /BLOG/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:51 +0000] "GET /NEW/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:51 +0000] "GET /NEW/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:52 +0000] "GET /OLD/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:52 +0000] "GET /OLD/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:52 +0000] "GET /NEWSITE/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:53 +0000] "GET /NEWSITE/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:53 +0000] "GET /TEST/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:54 +0000] "GET /TEST/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:54 +0000] "GET /TESTING/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:54 +0000] "GET /TESTING/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:55 +0000] "GET /MAIN/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:55 +0000] "GET /MAIN/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:55 +0000] "GET /PROD/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:56 +0000] "GET /PROD/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:56 +0000] "GET /DEV/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:57 +0000] "GET /DEV/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/120.0.2210.91" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:57 +0000] "GET /BACKUP/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:57 +0000] "GET /BACKUP/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:58 +0000] "GET /PROTAL/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:58 +0000] "GET /PROTAL/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 403 BYPASS - - [02/Aug/2026:04:51:58 +0000] "GET /WP-CONTENT/wp-admin/install.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 403 BYPASS - - [02/Aug/2026:04:51:59 +0000] "GET /WP-CONTENT/wp-admin/setup-config.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Linux; Android 14; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:51:59 +0000] "GET /CORE/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:00 +0000] "GET /CORE/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:00 +0000] "GET /STAGING/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:00 +0000] "GET /STAGING/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/119.0.2151.97" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:01 +0000] "GET /WP-INCLUDES/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:01 +0000] "GET /WP-INCLUDES/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:02 +0000] "GET /ADMIN/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:02 +0000] "GET /ADMIN/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:03 +0000] "GET /WP-OLD/wp-admin/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Linux; Android 14; SM-G998B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:03 +0000] "GET /WP-OLD/wp-admin/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:04 +0000] "GET /WP-ADMIN/install.php HTTP/1.1" 387 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.1 Mobile/15E148 Safari/604.1" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 BYPASS - - [02/Aug/2026:04:52:04 +0000] "GET /WP-ADMIN/setup-config.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 MISS - - [02/Aug/2026:04:52:06 +0000] "GET /lca_orders HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:120.0) Gecko/20100101 Firefox/120.0" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 MISS - - [02/Aug/2026:04:52:06 +0000] "GET /lcaadmin HTTP/1.1" 35249 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
5.175.189.113 - - - 404 MISS - - [02/Aug/2026:04:52:07 +0000] "GET /lcaportalstore HTTP/1.1" 35249 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_2_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "5.175.189.113, 5.175.189.113, 5.175.189.113, 5.175.189.113"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:52:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785646345.0119009017944335937500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
69.57.172.212 - - - 200 BYPASS - - [02/Aug/2026:04:52:25 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.212, 69.57.172.212, 69.57.172.212, 69.57.172.212"
69.57.172.212 - _uid=0100007F09CD6E6A4305FF0602991D03 - 200 BYPASS - - [02/Aug/2026:04:52:27 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.212, 69.57.172.212, 69.57.172.212, 69.57.172.212"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:57:59 +0000] "GET /--wp-lgj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:57:59 +0000] "GET /.tmb/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:57:59 +0000] "GET /.tmb/la.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 BYPASS - - [02/Aug/2026:04:57:59 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:04:58:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785646681.3849179744720458984375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:02 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:02 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:02 +0000] "GET /.well-known/991176.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:02 +0000] "GET /.well-known/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:03 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:04 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:04 +0000] "GET /.well-known/caches.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:05 +0000] "GET /.well-known/elp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:05 +0000] "GET /.well-known/min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:05 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:05 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:06 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:06 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:06 +0000] "GET /_podt.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:06 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:07 +0000] "GET /aahana/json.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:04:58:07 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:04:58:07 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:07 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:09 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:10 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:10 +0000] "GET /ahax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:11 +0000] "GET /alera/alpha.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:11 +0000] "GET /alfa-rex.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:11 +0000] "GET /app.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:11 +0000] "GET /appwp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:12 +0000] "GET /astra/inc/fm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:04:58:12 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:04:58:12 +0000] "GET /bless.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:12 +0000] "GET /cgi-bin/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:13 +0000] "GET /cgi-binwp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:13 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:04:58:13 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:13 +0000] "GET /cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:14 +0000] "GET /co.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:14 +0000] "GET /codemirror/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:14 +0000] "GET /colors/blue/info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:14 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:15 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:04:58:15 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 BYPASS - - [02/Aug/2026:04:58:15 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:15 +0000] "GET /dex.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:16 +0000] "GET /docsbypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:16 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:16 +0000] "GET /env.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:16 +0000] "GET /eror.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:17 +0000] "GET /file4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:17 +0000] "GET /fm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 MISS - - [02/Aug/2026:04:58:17 +0000] "GET /form.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:05:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785646802.6457400321960449218750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:16 +0000] "GET /--wp-lgj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:16 +0000] "GET /.tmb/admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:17 +0000] "GET /.tmb/la.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 BYPASS - - [02/Aug/2026:05:05:17 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:17 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:17 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:18 +0000] "GET /.well-known/991176.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:18 +0000] "GET /.well-known/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:18 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:18 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:19 +0000] "GET /.well-known/caches.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:19 +0000] "GET /.well-known/elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:19 +0000] "GET /.well-known/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:19 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:20 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:20 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:20 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:20 +0000] "GET /_podt.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:21 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:21 +0000] "GET /aahana/json.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:21 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:21 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:22 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:22 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:22 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:23 +0000] "GET /ahax.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:23 +0000] "GET /alera/alpha.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:23 +0000] "GET /alfa-rex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:23 +0000] "GET /app.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:24 +0000] "GET /appwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:24 +0000] "GET /astra/inc/fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:24 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:24 +0000] "GET /bless.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:25 +0000] "GET /cgi-bin/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:25 +0000] "GET /cgi-binwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:25 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:25 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:26 +0000] "GET /cloud.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:26 +0000] "GET /co.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:26 +0000] "GET /codemirror/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:26 +0000] "GET /colors/blue/info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:26 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:27 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:27 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 BYPASS - - [02/Aug/2026:05:05:27 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:27 +0000] "GET /dex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:28 +0000] "GET /docsbypass.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:28 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:28 +0000] "GET /env.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:28 +0000] "GET /eror.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:29 +0000] "GET /file4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:29 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:05:29 +0000] "GET /form.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:32 +0000] "GET /--wp-lgj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:32 +0000] "GET /.tmb/admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:32 +0000] "GET /.tmb/la.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 BYPASS - - [02/Aug/2026:05:09:33 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:33 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:33 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:33 +0000] "GET /.well-known/991176.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:34 +0000] "GET /.well-known/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:34 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:34 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:34 +0000] "GET /.well-known/caches.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:35 +0000] "GET /.well-known/elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:35 +0000] "GET /.well-known/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:35 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:35 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:36 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:36 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:36 +0000] "GET /_podt.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:36 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:37 +0000] "GET /aahana/json.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:37 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:37 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:37 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:38 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:38 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:38 +0000] "GET /ahax.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:39 +0000] "GET /alera/alpha.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:39 +0000] "GET /alfa-rex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:39 +0000] "GET /app.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:39 +0000] "GET /appwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:40 +0000] "GET /astra/inc/fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:40 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:40 +0000] "GET /bless.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:40 +0000] "GET /cgi-bin/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:41 +0000] "GET /cgi-binwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:41 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:41 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:41 +0000] "GET /cloud.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:41 +0000] "GET /co.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:42 +0000] "GET /codemirror/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:42 +0000] "GET /colors/blue/info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:42 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:42 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:43 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 BYPASS - - [02/Aug/2026:05:09:43 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:43 +0000] "GET /dex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:43 +0000] "GET /docsbypass.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:44 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:44 +0000] "GET /env.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:44 +0000] "GET /eror.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:44 +0000] "GET /file4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:45 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
20.104.18.253 - - - 404 HIT - - [02/Aug/2026:05:09:45 +0000] "GET /form.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.104.18.253, 20.104.18.253, 20.104.18.253, 20.104.18.253"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:05:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785648602.8992269039154052734375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.91.203.45 - - - 403 BYPASS - - [02/Aug/2026:05:35:50 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 MISS - - [02/Aug/2026:05:35:52 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 MISS - - [02/Aug/2026:05:35:56 +0000] "GET /err.php HTTP/1.1" 433 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 MISS - - [02/Aug/2026:05:35:58 +0000] "GET /img.php HTTP/1.1" 433 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 MISS - - [02/Aug/2026:05:36:00 +0000] "GET //aa.php HTTP/1.1" 433 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 MISS - - [02/Aug/2026:05:36:03 +0000] "GET //av.php HTTP/1.1" 433 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 MISS - - [02/Aug/2026:05:36:06 +0000] "GET /xa.php HTTP/1.1" 433 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - - - 404 HIT - - [02/Aug/2026:05:36:07 +0000] "GET /media.php HTTP/1.1" 491 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FDEC56E6A4305FF0602F21A03 - 404 MISS - - [02/Aug/2026:05:36:10 +0000] "GET /images.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FDEC56E6A4305FF0602F21A03 - 404 MISS - - [02/Aug/2026:05:36:12 +0000] "GET /xp.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FDEC56E6A4305FF0602F21A03 - 404 HIT - - [02/Aug/2026:05:36:12 +0000] "GET /admin.php HTTP/1.1" 403 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007F11D16E6A4305FF0602351F03 - 404 MISS - - [02/Aug/2026:05:36:13 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCEC56E6A4305FF0602C21A03 - 404 MISS - - [02/Aug/2026:05:36:15 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCEC56E6A4305FF0602C21A03 - 404 MISS - - [02/Aug/2026:05:36:16 +0000] "GET /ops.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCEC56E6A4305FF0602C21A03 - 404 MISS - - [02/Aug/2026:05:36:16 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCEC56E6A4305FF0602C21A03 - 404 MISS - - [02/Aug/2026:05:36:17 +0000] "GET /biufile.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCEC56E6A4305FF0602C21A03 - 404 MISS - - [02/Aug/2026:05:36:18 +0000] "GET /coffexium.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCEC56E6A4305FF0602C21A03 - 404 HIT - - [02/Aug/2026:05:36:20 +0000] "GET /dex.php HTTP/1.1" 403 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007F17D16E6A4305FF06024C1F03 - 404 HIT - - [02/Aug/2026:05:36:22 +0000] "GET /1.php HTTP/1.1" 403 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:25 +0000] "GET /coffee.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:25 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:27 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:28 +0000] "GET /mgrr.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:29 +0000] "GET /55.php?p= HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:30 +0000] "GET /ajax.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:31 +0000] "GET /yj09.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:33 +0000] "GET /ora.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:35 +0000] "GET /scxy.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:39 +0000] "GET /ws13.php?p= HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:41 +0000] "GET /btx25.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:42 +0000] "GET //xpohywjo.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:43 +0000] "GET /ecvvhlei.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:45 +0000] "GET /SDsadqwrf.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:47 +0000] "GET /ssjpxze.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:49 +0000] "GET /ors32envu.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:51 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
20.91.203.45 - _uid=0100007FCDC56E6A4305FF0602BC1A03 - 404 MISS - - [02/Aug/2026:05:36:54 +0000] "GET /BDKR28WP.php HTTP/1.1" 345 "-" "-" "20.91.203.45, 20.91.203.45, 20.91.203.45, 20.91.203.45"
72.146.20.230 - - - 403 BYPASS - - [02/Aug/2026:05:55:41 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
72.146.20.230 - _uid=0100007FDDDB6E6A4305FF0602FC2203 - 404 HIT - - [02/Aug/2026:05:55:42 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 344 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
72.146.20.230 - _uid=0100007F38D76E6A4305FF0602B22103 - 404 MISS - - [02/Aug/2026:05:55:42 +0000] "GET /IndoSec.php HTTP/1.1" 345 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
72.146.20.230 - _uid=0100007F38D76E6A4305FF0602B22103 - 404 MISS - - [02/Aug/2026:05:55:42 +0000] "GET /1revo.php HTTP/1.1" 345 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
72.146.20.230 - _uid=0100007F38D76E6A4305FF0602B22103 - 404 MISS - - [02/Aug/2026:05:55:43 +0000] "GET /loader.php HTTP/1.1" 345 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
72.146.20.230 - _uid=0100007F38D76E6A4305FF0602B22103 - 404 MISS - - [02/Aug/2026:05:55:43 +0000] "GET /esp.php? HTTP/1.1" 345 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
72.146.20.230 - _uid=0100007F38D76E6A4305FF0602B22103 - 404 MISS - - [02/Aug/2026:05:55:43 +0000] "GET /dj.php HTTP/1.1" 345 "-" "-" "72.146.20.230, 72.146.20.230, 72.146.20.230, 72.146.20.230"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785650403.1132190227508544921875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:12 +0000] "GET /.well-known/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:12 +0000] "GET /item.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:12 +0000] "GET /2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:13 +0000] "GET /wp-content/languages/wp-login.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:13 +0000] "GET /wp-includes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:01:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785650474.5294470787048339843750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:01:15 +0000] "POST /wp-cron.php?doing_wp_cron=1785650475.1814830303192138671875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:01:16 +0000] "POST /wp-cron.php?doing_wp_cron=1785650476.0938570499420166015625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:16 +0000] "GET /site/wp-admin/ HTTP/1.1" 35262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:17 +0000] "GET /wp-admin/js/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 302 MISS - - [02/Aug/2026:06:01:18 +0000] "GET /wp-signup.php HTTP/1.1" 540 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:18 +0000] "GET /wp-admin/install.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:18 +0000] "GET /mini.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:19 +0000] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:19 +0000] "GET /wp-admin/images/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:19 +0000] "GET /gmo.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:19 +0000] "GET /mar.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:20 +0000] "GET /wp-admin/images/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 302 BYPASS - - [02/Aug/2026:06:01:21 +0000] "GET /wp-admin/user/index.php HTTP/1.1" 643 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:21 +0000] "GET /wp-includes/Text/autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:21 +0000] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:22 +0000] "GET /k.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:22 +0000] "GET /wp-includes/plugins.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:22 +0000] "GET /fi2.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:22 +0000] "GET /wp-includes/customize/chosen.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 301 MISS - - [02/Aug/2026:06:01:24 +0000] "GET /index.php HTTP/1.1" 412 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:24 +0000] "GET /wp-content/upgrade/wp-login.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:24 +0000] "GET /wp-includes/rest-api/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:25 +0000] "GET /simple/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 HIT - - [02/Aug/2026:06:01:25 +0000] "GET /1.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:25 +0000] "GET /css/xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:25 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:26 +0000] "GET /wp-includes/IXR/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:26 +0000] "GET /zwso.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:26 +0000] "GET /help.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:26 +0000] "GET /ty.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:27 +0000] "GET /13.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:27 +0000] "GET /templates/beez3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 HIT - - [02/Aug/2026:06:01:27 +0000] "GET /install.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:27 +0000] "GET /themes/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:28 +0000] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:28 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:28 +0000] "GET /cc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:29 +0000] "GET /wp-content/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:29 +0000] "GET /wp-admin/css/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:29 +0000] "GET /wp-back.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 200 MISS - - [02/Aug/2026:06:01:31 +0000] "GET /search/label/PHP-Shells HTTP/1.1" 35441 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:31 +0000] "GET /adminfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:31 +0000] "GET /wp-content/cache/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:31 +0000] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:32 +0000] "GET /hehehehe.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:32 +0000] "GET /wp-admin/user/xmrlpc.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:32 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:32 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:33 +0000] "GET /cgi-bin/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:33 +0000] "GET /wp-includes/widgets/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:33 +0000] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:34 +0000] "GET /wp-includes/images/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:34 +0000] "GET /wp-admin/css/colors/coffee/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:34 +0000] "GET /wp-admin/css/colors/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:35 +0000] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:36 +0000] "GET /.well-known/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:36 +0000] "GET /wp-includes/fonts/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:37 +0000] "GET /wp-includes/Requests/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 200 BYPASS - - [02/Aug/2026:06:01:38 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:38 +0000] "GET /wp-content/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:38 +0000] "GET /x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:39 +0000] "GET /admin/upload/css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:39 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:39 +0000] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:39 +0000] "GET /.well-known/classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:40 +0000] "GET /wp-admin/maint/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:40 +0000] "GET /menu.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:41 +0000] "GET /wp-content/plugins/xt/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:42 +0000] "GET /.well-known/cong.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:42 +0000] "GET /webadmin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:42 +0000] "GET /403.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:43 +0000] "GET /Sanskrit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:43 +0000] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:43 +0000] "GET /wp-admin/css/colors/midnight/colors.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:43 +0000] "GET /admin/controller/extension/extension/ultra.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:44 +0000] "GET /wp-configs.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:44 +0000] "GET /asasx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:44 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:44 +0000] "GET /.well-known/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:45 +0000] "GET /bs1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:45 +0000] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:45 +0000] "GET /wp-admin/includes/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:46 +0000] "GET /wp-includes/Text/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:46 +0000] "GET /v.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:46 +0000] "GET /a.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:46 +0000] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:47 +0000] "GET /wi.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:47 +0000] "GET /images/class-config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:47 +0000] "GET /cong.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:47 +0000] "GET /vv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:48 +0000] "GET /user-edit.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:48 +0000] "GET /edit-comments.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:49 +0000] "GET /.well-known/file.php/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:51 +0000] "GET /wp-content/plugins/xt HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:51 +0000] "GET /alfanew.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:52 +0000] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:52 +0000] "GET /text.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:52 +0000] "GET /user.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:52 +0000] "GET /batm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:53 +0000] "GET /wp-conflg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:53 +0000] "GET /wp-content/plugins/linkpreview/index.php/class.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:54 +0000] "GET /wp-content/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:54 +0000] "GET /db.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:54 +0000] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:55 +0000] "GET /g.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:55 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:55 +0000] "GET /system_log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:55 +0000] "GET /wp-crons.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:56 +0000] "GET /wp-admin/css/colors/about.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 HIT - - [02/Aug/2026:06:01:56 +0000] "GET /atomlib.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:56 +0000] "GET /wp-admin/images/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:56 +0000] "GET /bak.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:57 +0000] "GET /link.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:01:57 +0000] "GET /wp-includes/autoloadclassmap.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:06:01:57 +0000] "GET /wp-admin/images/chosen.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:59 +0000] "GET /ern1.PhP7 HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:01:59 +0000] "GET /wp-2019.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 HIT - - [02/Aug/2026:06:01:59 +0000] "GET /edit.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:02:00 +0000] "GET /wso.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:06:02:00 +0000] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:06:02:00 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:05:47 +0000] "POST /wp-cron.php?doing_wp_cron=1785650747.4432361125946044921875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
82.130.249.15 - - - 200 BYPASS - - [02/Aug/2026:06:05:48 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "82.130.249.15, 82.130.249.15, 82.130.249.15, 82.130.249.15"
82.130.249.15 - _uid=0100007F3CDE6E6A4305FF06020A2403 - 200 BYPASS - - [02/Aug/2026:06:05:49 +0000] "POST /wp-login.php HTTP/1.1" 2885 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "82.130.249.15, 82.130.249.15, 82.130.249.15, 82.130.249.15"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:08:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785650920.4993779659271240234375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:29:21 +0000] "POST /wp-cron.php?doing_wp_cron=1785652160.9510819911956787109375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
52.167.144.166 - - - 200 BYPASS - - [02/Aug/2026:06:29:21 +0000] "GET /my-account/ HTTP/1.1" 51632 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" "52.167.144.166, 52.167.144.166, 52.167.144.166, 52.167.144.166"
103.59.160.95 - - - 400 BYPASS - - [02/Aug/2026:06:30:09 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 760 "-" "wp2shell-rce/1.0" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:12 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:14 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:16 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:18 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:20 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:06:30:23 +0000] "POST /wp-cron.php?doing_wp_cron=1785652222.5243120193481445312500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:23 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
103.59.160.95 - - - 207 BYPASS - - [02/Aug/2026:06:30:25 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" "103.59.160.95, 103.59.160.95, 103.59.160.95, 103.59.160.95"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785654003.0431540012359619140625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:04 +0000] "GET /--wp-lgj.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:05 +0000] "GET /.tmb/admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:05 +0000] "GET /.tmb/la.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 BYPASS - - [02/Aug/2026:07:07:05 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:07:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785654426.9419879913330078125000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:07:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785654427.5810160636901855468750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:07:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785654428.4731669425964355468750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:09 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:09 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:09 +0000] "GET /.well-known/991176.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:09 +0000] "GET /.well-known/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:10 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:11 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:11 +0000] "GET /.well-known/caches.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:12 +0000] "GET /.well-known/elp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:12 +0000] "GET /.well-known/min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:12 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:12 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:13 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:13 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:13 +0000] "GET /_podt.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:13 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:14 +0000] "GET /aahana/json.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:14 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:14 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:14 +0000] "GET /admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:16 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:17 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:18 +0000] "GET /ahax.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:18 +0000] "GET /alera/alpha.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:18 +0000] "GET /alfa-rex.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:18 +0000] "GET /app.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:19 +0000] "GET /appwp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:19 +0000] "GET /astra/inc/fm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:19 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:19 +0000] "GET /bless.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:20 +0000] "GET /cgi-bin/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:20 +0000] "GET /cgi-binwp.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:20 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:20 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:21 +0000] "GET /cloud.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:21 +0000] "GET /co.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:21 +0000] "GET /codemirror/about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:21 +0000] "GET /colors/blue/info.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:22 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:22 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:22 +0000] "GET /content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 BYPASS - - [02/Aug/2026:07:07:22 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:23 +0000] "GET /dex.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:23 +0000] "GET /docsbypass.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:23 +0000] "GET /dropdown.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:23 +0000] "GET /env.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:24 +0000] "GET /eror.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:24 +0000] "GET /file4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:24 +0000] "GET /fm.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 MISS - - [02/Aug/2026:07:07:24 +0000] "GET /form.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785655803.0275049209594726562500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
173.252.82.32 - - - 200 BYPASS - - [02/Aug/2026:07:38:46 +0000] "GET /wp-content/uploads/2021/03/2024KitPreventive.webp HTTP/1.1" 16908 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)" "173.252.82.32, 173.252.82.32, 173.252.82.32, 173.252.82.32"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:39:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785656393.4063398838043212890625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
143.14.11.140 - - - 200 BYPASS - - [02/Aug/2026:07:39:54 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "143.14.11.140, 143.14.11.140, 143.14.11.140, 143.14.11.140"
143.14.11.140 - _uid=0100007F4AF46E6A4305FF0602B32E03 - 200 BYPASS - - [02/Aug/2026:07:39:56 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "143.14.11.140, 143.14.11.140, 143.14.11.140, 143.14.11.140"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:10 +0000] "GET /--wp-lgj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:11 +0000] "GET /.tmb/admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:11 +0000] "GET /.tmb/la.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 BYPASS - - [02/Aug/2026:07:53:11 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:12 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:12 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:13 +0000] "GET /.well-known/991176.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:13 +0000] "GET /.well-known/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:13 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:13 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:14 +0000] "GET /.well-known/caches.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:14 +0000] "GET /.well-known/elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:14 +0000] "GET /.well-known/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:14 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:15 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:15 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:15 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:15 +0000] "GET /_podt.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:16 +0000] "GET /aaa.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:16 +0000] "GET /aahana/json.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:16 +0000] "GET /abcd.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:16 +0000] "GET /about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:17 +0000] "GET /admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:17 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:17 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35240 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:18 +0000] "GET /ahax.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:18 +0000] "GET /alera/alpha.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:18 +0000] "GET /alfa-rex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:18 +0000] "GET /app.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:19 +0000] "GET /appwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:19 +0000] "GET /astra/inc/fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:19 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:19 +0000] "GET /bless.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:20 +0000] "GET /cgi-bin/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:20 +0000] "GET /cgi-binwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:20 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:20 +0000] "GET /classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:21 +0000] "GET /cloud.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:21 +0000] "GET /co.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:21 +0000] "GET /codemirror/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:21 +0000] "GET /colors/blue/info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:22 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:22 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:22 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 BYPASS - - [02/Aug/2026:07:53:22 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:23 +0000] "GET /dex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:23 +0000] "GET /docsbypass.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:23 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:23 +0000] "GET /env.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:24 +0000] "GET /eror.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:24 +0000] "GET /file4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:24 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
20.226.5.174 - - - 404 HIT - - [02/Aug/2026:07:53:24 +0000] "GET /form.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.226.5.174, 20.226.5.174, 20.226.5.174, 20.226.5.174"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:54 +0000] "GET /test1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:07:58:54 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:58:54 +0000] "GET /wp-content/uploads/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:54 +0000] "GET /zoom1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:55 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:55 +0000] "GET /r.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:55 +0000] "GET /sf.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:55 +0000] "GET /t.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:56 +0000] "GET /7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:56 +0000] "GET /b.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:56 +0000] "GET /buy.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:56 +0000] "GET /config.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:57 +0000] "GET /num.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:57 +0000] "GET /areak1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:57 +0000] "GET /vc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:58:57 +0000] "GET /wp-content/plugins/admin.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:57 +0000] "GET /core.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:58:58 +0000] "GET /wp-admin/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:58:58 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:58:58 +0000] "GET /wp-content/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:58:58 +0000] "GET /wp-content/plugins/beteng88/ws83.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:58:59 +0000] "GET /ws37.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:07:59:01 +0000] "POST /wp-cron.php?doing_wp_cron=1785657541.1397840976715087890625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:01 +0000] "GET /assets/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:02 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:02 +0000] "GET /wp-admin/js/widgets/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:02 +0000] "GET /il.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:02 +0000] "GET /images/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:03 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:03 +0000] "GET /load.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:03 +0000] "GET /wp-content/themes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:03 +0000] "GET /wp-themes.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:04 +0000] "GET /xda.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:04 +0000] "GET /.trash7206/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:04 +0000] "GET /doc.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:04 +0000] "GET /storage/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:05 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:05 +0000] "GET /wp-includes/ID3/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:05 +0000] "GET /wp-includes/block-bindings/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:05 +0000] "GET /wp-includes/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:06 +0000] "GET /wp-includes/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:06 +0000] "GET /cache.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:06 +0000] "GET /filemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:06 +0000] "GET /wp-blog.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:07 +0000] "GET /wp-includes/ID3/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:07 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:07 +0000] "GET /cd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:08 +0000] "GET /css.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:08 +0000] "GET /lu4.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:07:59:08 +0000] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:08 +0000] "GET /wp-content/plugins/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:09 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:09 +0000] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:09 +0000] "GET /ant.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 HIT - - [02/Aug/2026:07:59:09 +0000] "GET /autoload_classmap.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:10 +0000] "GET /storage/rip.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:10 +0000] "GET /tinyfilemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:11 +0000] "GET /wp-includes/bk/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:12 +0000] "GET /403.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:12 +0000] "GET /av.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:12 +0000] "GET /tool.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:12 +0000] "GET /wp-admin/includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 302 BYPASS - - [02/Aug/2026:07:59:13 +0000] "GET /wp-admin/index.php HTTP/1.1" 636 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:14 +0000] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:14 +0000] "GET /wp-content/themes/pridmag/b.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:14 +0000] "GET /wp-includes/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:15 +0000] "GET /wp-trackback.php HTTP/1.1" 537 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:16 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:17 +0000] "GET /.bod/.ll/ HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:18 +0000] "GET /0.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:18 +0000] "GET /1index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:18 +0000] "GET /autoload_classmap/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:19 +0000] "GET /dvve.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:19 +0000] "GET /wp-includes/PHPMailer/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:19 +0000] "GET /ws77.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:19 +0000] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:20 +0000] "GET /admin/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 BYPASS - - [02/Aug/2026:07:59:20 +0000] "GET /wp-admin/css/index.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:20 +0000] "GET /wp-includes/css/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:21 +0000] "GET /xx.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:21 +0000] "GET /wp-content/about.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:21 +0000] "GET /wp-includes/assets/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:21 +0000] "GET /wp-the.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:22 +0000] "GET /ws81.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:22 +0000] "GET /3.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:22 +0000] "GET /a1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:22 +0000] "GET /ca5.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:23 +0000] "GET /install.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:23 +0000] "GET /radio.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:23 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:23 +0000] "GET /wp-signin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:24 +0000] "GET /Ov-Simple1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 HIT - - [02/Aug/2026:07:59:24 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:24 +0000] "GET /ftde.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:24 +0000] "GET /hplfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:25 +0000] "GET /log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:25 +0000] "GET /test.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:25 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 404 MISS - - [02/Aug/2026:07:59:25 +0000] "GET /wp-admin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:26 +0000] "GET /wp-admin/images/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 302 BYPASS - - [02/Aug/2026:07:59:27 +0000] "GET /wp-admin/network/ HTTP/1.1" 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 500 MISS - - [02/Aug/2026:07:59:27 +0000] "GET /wp-config-sample.php HTTP/1.1" 2904 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:28 +0000] "GET /wp-content/packed.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
52.238.199.152 - - - 403 BYPASS - - [02/Aug/2026:07:59:28 +0000] "GET /wp-includes/IXR/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "52.238.199.152, 52.238.199.152, 52.238.199.152, 52.238.199.152"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:08:00:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785657602.0526959896087646484375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:08:25:31 +0000] "POST /wp-cron.php?doing_wp_cron=1785659130.6410779953002929687500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
103.216.117.118 - - - 200 BYPASS - - [02/Aug/2026:08:25:31 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.216.117.118, 103.216.117.118, 103.216.117.118, 103.216.117.118"
103.216.117.118 - _uid=0100007FFBFE6E6A4305FF06028F3103 - 200 BYPASS - - [02/Aug/2026:08:25:35 +0000] "POST /wp-login.php HTTP/1.1" 2847 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.216.117.118, 103.216.117.118, 103.216.117.118, 103.216.117.118"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:08:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785659402.5407049655914306640625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:08:35:24 +0000] "POST /wp-cron.php?doing_wp_cron=1785659724.3528881072998046875000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
102.134.101.35 - - - 200 BYPASS - - [02/Aug/2026:08:35:24 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "102.134.101.35, 102.134.101.35, 102.134.101.35, 102.134.101.35"
102.134.101.35 - _uid=0100007F4C016F6A4305FF0602243203 - 200 BYPASS - - [02/Aug/2026:08:35:26 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "102.134.101.35, 102.134.101.35, 102.134.101.35, 102.134.101.35"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:08:36:14 +0000] "POST /wp-cron.php?doing_wp_cron=1785659773.9688251018524169921875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
74.125.217.72 - - - 404 MISS - - [02/Aug/2026:08:36:14 +0000] "GET /.well-known/assetlinks.json HTTP/1.1" 35249 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64)AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Safari/537.36" "74.125.217.72, 74.125.217.72, 74.125.217.72, 74.125.217.72"
192.0.89.217 - - - 200 BYPASS - - [02/Aug/2026:08:52:51 +0000] "POST /xmlrpc.php?for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660770&nonce=zCqCmmTCGr&body-hash=pdst%2B%2B8gjpsEsdzTGdS19%2BYN3g4%3D&signature=aoGCYbAr4N3uSK0AINVVMdRvQCI%3D HTTP/1.1" 241 "https://lcaportalstoreg.liceclinicsofamerica.com/xmlrpc.php?for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660770&nonce=zCqCmmTCGr&body-hash=pdst%2B%2B8gjpsEsdzTGdS19%2BYN3g4%3D&signature=aoGCYbAr4N3uSK0AINVVMdRvQCI%3D" "Jetpack by WordPress.com" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
192.0.89.217 - - - 200 BYPASS - - [02/Aug/2026:08:52:51 +0000] "GET /.well-known/hosting-provider HTTP/1.1" 241 "https://lcaportalstoreg.liceclinicsofamerica.com/.well-known/hosting-provider" "WordPress.com; https://lcaportalstoreg.liceclinicsofamerica.com" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
192.0.89.217 - - - 200 BYPASS - - [02/Aug/2026:08:52:51 +0000] "POST /xmlrpc.php?for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660771&nonce=Ra601gfpPE&body-hash=l5MGKDtBMCRLlbhRxcm3udBaUGk%3D&signature=8QomhQz6NNINA3pULSYwCIcAE7E%3D HTTP/1.1" 241 "https://lcaportalstoreg.liceclinicsofamerica.com/xmlrpc.php?for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660771&nonce=Ra601gfpPE&body-hash=l5MGKDtBMCRLlbhRxcm3udBaUGk%3D&signature=8QomhQz6NNINA3pULSYwCIcAE7E%3D" "Jetpack by WordPress.com" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
192.0.89.217 - - - 403 BYPASS - - [02/Aug/2026:08:52:52 +0000] "POST /xmlrpc.php?for=jetpack HTTP/1.1" 385 "https://lcaportalstoreg.liceclinicsofamerica.com/xmlrpc.php?for=jetpack" "The Incutio XML-RPC PHP Library" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
192.0.89.217 - - - 200 BYPASS - - [02/Aug/2026:08:52:52 +0000] "GET /?rest_route=%2Fjetpack%2Fv4%2Fconnection%2F&_for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660772&nonce=oqr5eJZuFX&body-hash&signature=XkjfhNQy2inl%2BtUiQT584E1Lqbg%3D HTTP/1.1" 241 "https://lcaportalstoreg.liceclinicsofamerica.com/?rest_route=%2Fjetpack%2Fv4%2Fconnection%2F&_for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660772&nonce=oqr5eJZuFX&body-hash&signature=XkjfhNQy2inl%2BtUiQT584E1Lqbg%3D" "Jetpack by WordPress.com" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
192.0.89.217 - - - 200 BYPASS - - [02/Aug/2026:08:52:52 +0000] "GET /?rest_route=/ HTTP/1.1" 241 "https://lcaportalstoreg.liceclinicsofamerica.com/?rest_route=/" "WordPress.com; https://lcaportalstoreg.liceclinicsofamerica.com" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
192.0.89.217 - - - 200 BYPASS - - [02/Aug/2026:08:52:53 +0000] "POST /xmlrpc.php?for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660773&nonce=ImVBQlBmnD&body-hash=METbiCw%2BtMQdctk0fdLMNlXOKKM%3D&signature=uXVSUMlz%2BwB4rpuyAFGxFlsMsMg%3D HTTP/1.1" 241 "https://lcaportalstoreg.liceclinicsofamerica.com/xmlrpc.php?for=jetpack&token=rhwWjvFzV%260pfkl%281Tv%23lhdVhfbPnq%21u%3A1%3A0×tamp=1785660773&nonce=ImVBQlBmnD&body-hash=METbiCw%2BtMQdctk0fdLMNlXOKKM%3D&signature=uXVSUMlz%2BwB4rpuyAFGxFlsMsMg%3D" "Jetpack by WordPress.com" "192.0.89.217, 192.0.89.217, 192.0.89.217, 192.0.89.217"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:09:00:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785661202.3977060317993164062500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:09:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785663002.7707350254058837890625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785664802.7744710445404052734375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:03:25 +0000] "POST /wp-cron.php?doing_wp_cron=1785665004.5297949314117431640625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
72.167.132.114 - - - 200 BYPASS - - [02/Aug/2026:10:03:25 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
72.167.132.114 - _uid=0100007FED156F6A4105FF06024B0403 - 200 BYPASS - - [02/Aug/2026:10:03:26 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:09:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785665346.6389029026031494140625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:09:07 +0000] "POST /wp-cron.php?doing_wp_cron=1785665347.2492330074310302734375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:09:08 +0000] "POST /wp-cron.php?doing_wp_cron=1785665348.3563740253448486328125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
52.167.144.219 - - - 200 MISS - - [02/Aug/2026:10:09:08 +0000] "GET /shop-now/ HTTP/1.1" 47079 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" "52.167.144.219, 52.167.144.219, 52.167.144.219, 52.167.144.219"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785666603.2216200828552246093750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:10:36:39 +0000] "POST /wp-cron.php?doing_wp_cron=1785666999.3846690654754638671875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
198.38.94.17 - - - 200 BYPASS - - [02/Aug/2026:10:36:40 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17"
198.38.94.17 - _uid=0100007FB81D6F6A4305FF0602353903 - 200 BYPASS - - [02/Aug/2026:10:36:41 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "198.38.94.17, 198.38.94.17, 198.38.94.17, 198.38.94.17"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:11:00:04 +0000] "POST /wp-cron.php?doing_wp_cron=1785668403.7252259254455566406250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:11:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785670202.9529519081115722656250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:12:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785672002.9322230815887451171875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:12:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785673802.9798600673675537109375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:13:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785675603.1936209201812744140625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:25 +0000] "GET /as.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:25 +0000] "GET /k.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:26 +0000] "GET /system_log.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:26 +0000] "GET /x.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:26 +0000] "GET /autoload_classmap.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:26 +0000] "GET /hosty.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:27 +0000] "GET /test1.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:27 +0000] "GET /zwso.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:27 +0000] "GET /fpwch.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:13:04:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785675868.8491189479827880859375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:13:04:29 +0000] "POST /wp-cron.php?doing_wp_cron=1785675869.4605131149291992187500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:13:04:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785675870.3649671077728271484375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:31 +0000] "GET /mini HTTP/1.1" 35254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:32 +0000] "GET /wp-blog-header.php HTTP/1.1" 470 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:32 +0000] "GET /about/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:33 +0000] "GET /function/function.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:33 +0000] "GET /wp-signin.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:33 +0000] "GET /f35.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:33 +0000] "GET /gg.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:34 +0000] "GET /class.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:34 +0000] "GET /flower.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:34 +0000] "GET /motu.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:34 +0000] "GET /404.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:35 +0000] "GET /lite.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:35 +0000] "GET /lock360.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 403 BYPASS - - [02/Aug/2026:13:04:35 +0000] "GET /wp-content/wp-conflg.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 200 MISS - - [02/Aug/2026:13:04:36 +0000] "GET /wp-links-opml.php HTTP/1.1" 546 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:37 +0000] "GET /.alf.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:37 +0000] "GET /ws.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:37 +0000] "GET /css/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:37 +0000] "GET /ioxi-o.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:38 +0000] "GET /ws54.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:38 +0000] "GET /155.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 403 BYPASS - - [02/Aug/2026:13:04:38 +0000] "GET /wp-includes/min.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 403 BYPASS - - [02/Aug/2026:13:04:39 +0000] "GET /xmlrpc.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:39 +0000] "GET /tinyfilemanager.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:39 +0000] "GET /hplfuns.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:39 +0000] "GET /bthil.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:40 +0000] "GET /cv.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:40 +0000] "GET /sf.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:40 +0000] "GET /wp-content.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:42 +0000] "GET /.bod/.ll/ HTTP/1.1" 35254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:42 +0000] "GET /txets.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:42 +0000] "GET /wk/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:42 +0000] "GET /222.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:43 +0000] "GET /new.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 403 BYPASS - - [02/Aug/2026:13:04:43 +0000] "GET /wp-content/upgrade/index.php HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:43 +0000] "GET /.trash7206/index.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:43 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:44 +0000] "GET /error.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 404 MISS - - [02/Aug/2026:13:04:44 +0000] "GET /a7.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
158.158.54.131 - - - 403 BYPASS - - [02/Aug/2026:13:04:44 +0000] "GET /wp-content/uploads/ HTTP/1.1" 467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "158.158.54.131, 158.158.54.131, 158.158.54.131, 158.158.54.131"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:13:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785677403.2270619869232177734375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:14:00:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785679202.3714010715484619140625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:14:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785681002.6472001075744628906250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:14:48:36 +0000] "POST /wp-cron.php?doing_wp_cron=1785682115.7815880775451660156250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:36 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1271 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:37 +0000] "POST /wp-json/batch/v1 HTTP/1.1" 1271 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:39 +0000] "POST /index.php?rest_route=/batch/v1 HTTP/1.1" 1271 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:14:48:40 +0000] "POST /wp-cron.php?doing_wp_cron=1785682120.1764149665832519531250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:14:48:41 +0000] "POST /wp-cron.php?doing_wp_cron=1785682120.8023450374603271484375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
129.121.121.252 - - - 404 BYPASS - - [02/Aug/2026:14:48:41 +0000] "POST /index.php/batch/v1 HTTP/1.1" 208996 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 404 BYPASS - - [02/Aug/2026:14:48:43 +0000] "POST /index.php/batch/v1 HTTP/1.1" 209004 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:45 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:46 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:47 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:49 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:50 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:51 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:52 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:54 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:55 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:56 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:58 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:48:59 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:00 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:01 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:03 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:04 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:05 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:06 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:08 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:09 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:10 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
129.121.121.252 - - - 207 BYPASS - - [02/Aug/2026:14:49:12 +0000] "POST /?rest_route=/batch/v1 HTTP/1.1" 1115 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:132.0) Gecko/20100101 Firefox/132.0" "129.121.121.252, 129.121.121.252, 129.121.121.252, 129.121.121.252"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:15:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785682802.6160020828247070312500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:15:22:53 +0000] "POST /wp-cron.php?doing_wp_cron=1785684172.5514309406280517578125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
68.183.22.192 - - - 200 BYPASS - - [02/Aug/2026:15:22:53 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.183.22.192, 68.183.22.192, 68.183.22.192, 68.183.22.192"
68.183.22.192 - _uid=0100007FCD606F6A4105FF06026A0503 - 200 BYPASS - - [02/Aug/2026:15:22:54 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "68.183.22.192, 68.183.22.192, 68.183.22.192, 68.183.22.192"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:15:30:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785684602.3929350376129150390625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:16:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785686402.5120100975036621093750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:16:11:05 +0000] "POST /wp-cron.php?doing_wp_cron=1785687065.0565240383148193359375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
72.167.132.114 - - - 200 BYPASS - - [02/Aug/2026:16:11:05 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
72.167.132.114 - _uid=0100007F196C6F6A4305FF0602395103 - 200 BYPASS - - [02/Aug/2026:16:11:07 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "72.167.132.114, 72.167.132.114, 72.167.132.114, 72.167.132.114"
158.158.32.229 - - - 403 BYPASS - - [02/Aug/2026:16:26:20 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - - - 404 MISS - - [02/Aug/2026:16:26:21 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - - - 404 MISS - - [02/Aug/2026:16:26:23 +0000] "GET /err.php HTTP/1.1" 433 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F3CD76E6A4305FF0602B32103 - 404 MISS - - [02/Aug/2026:16:26:25 +0000] "GET /img.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F3ED76E6A4305FF0602B42103 - 404 MISS - - [02/Aug/2026:16:26:26 +0000] "GET //aa.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F40D76E6A4305FF0602B52103 - 404 MISS - - [02/Aug/2026:16:26:28 +0000] "GET //av.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F43D76E6A4305FF0602B62103 - 404 MISS - - [02/Aug/2026:16:26:34 +0000] "GET /xa.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F46D76E6A4305FF0602B92103 - 404 MISS - - [02/Aug/2026:16:26:37 +0000] "GET /media.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F47D76E6A4305FF0602BA2103 - 404 MISS - - [02/Aug/2026:16:26:41 +0000] "GET /images.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F47D76E6A4305FF0602BA2103 - 404 MISS - - [02/Aug/2026:16:26:45 +0000] "GET /xp.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F47D76E6A4305FF0602BA2103 - 404 MISS - - [02/Aug/2026:16:26:47 +0000] "GET /admin.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6DF76E6A4305FF0602812F03 - 404 MISS - - [02/Aug/2026:16:26:48 +0000] "GET /222.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6A406F6A4305FF0602E74503 - 404 MISS - - [02/Aug/2026:16:26:49 +0000] "GET /mac.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6A406F6A4305FF0602E74503 - 404 MISS - - [02/Aug/2026:16:26:50 +0000] "GET /ops.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6A406F6A4305FF0602E74503 - 404 MISS - - [02/Aug/2026:16:26:51 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6A406F6A4305FF0602E74503 - 404 MISS - - [02/Aug/2026:16:26:53 +0000] "GET /biufile.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6A406F6A4305FF0602E74503 - 404 MISS - - [02/Aug/2026:16:26:54 +0000] "GET /coffexium.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F6A406F6A4305FF0602E74503 - 404 MISS - - [02/Aug/2026:16:26:56 +0000] "GET /dex.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F73F76E6A4305FF0602972F03 - 404 MISS - - [02/Aug/2026:16:26:58 +0000] "GET /1.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:26:58 +0000] "GET /coffee.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:26:59 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:00 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:01 +0000] "GET /mgrr.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:02 +0000] "GET /55.php?p= HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:03 +0000] "GET /ajax.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:03 +0000] "GET /yj09.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:04 +0000] "GET /ora.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:05 +0000] "GET /scxy.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:06 +0000] "GET /ws13.php?p= HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:07 +0000] "GET /btx25.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:09 +0000] "GET //xpohywjo.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:10 +0000] "GET /ecvvhlei.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:18 +0000] "GET /SDsadqwrf.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:22 +0000] "GET /ssjpxze.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:26 +0000] "GET /ors32envu.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:27 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
158.158.32.229 - _uid=0100007F35DD6E6A4305FF0602632303 - 404 MISS - - [02/Aug/2026:16:27:31 +0000] "GET /BDKR28WP.php HTTP/1.1" 345 "-" "-" "158.158.32.229, 158.158.32.229, 158.158.32.229, 158.158.32.229"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:16:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785688202.8581829071044921875000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:16:59:17 +0000] "POST /wp-cron.php?doing_wp_cron=1785689957.2938170433044433593750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
103.74.116.239 - - - 200 BYPASS - - [02/Aug/2026:16:59:17 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.74.116.239, 103.74.116.239, 103.74.116.239, 103.74.116.239"
103.74.116.239 - _uid=0100007F65776F6A4305FF0602F75503 - 200 BYPASS - - [02/Aug/2026:16:59:20 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.74.116.239, 103.74.116.239, 103.74.116.239, 103.74.116.239"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:10:30 +0000] "POST /wp-cron.php?doing_wp_cron=1785690629.9436099529266357421875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
162.0.217.77 - - - 200 BYPASS - - [02/Aug/2026:17:10:30 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "162.0.217.77, 162.0.217.77, 162.0.217.77, 162.0.217.77"
162.0.217.77 - _uid=0100007F067A6F6A4305FF0602C55603 - 200 BYPASS - - [02/Aug/2026:17:10:31 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "162.0.217.77, 162.0.217.77, 162.0.217.77, 162.0.217.77"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2018361091613769531250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2225239276885986328125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2437551021575927734375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2366969585418701171875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2366969585418701171875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2471799850463867187500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2528400421142578125000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2739899158477783203125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.2924458980560302734375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.3041200637817382812500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:57 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.4585349559783935546875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.6299180984497070312500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8510580062866210937500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8369660377502441406250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8370440006256103515625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8778378963470458984375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8728010654449462890625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8738799095153808593750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8979799747467041015625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.8700768947601318359375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.9050109386444091796875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691797.9017779827117919921875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.0754671096801757812500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.2334160804748535156250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /wp-config.php~ HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /wp-config.php.swp HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /.env.example HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /actuator/configprops HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /.env.backup HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /wp-config.php.bak HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /crusader-404-probe HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:58 +0000] "GET /.env.local HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:59 +0000] "GET /.env.production HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:59 +0000] "GET /_ignition/health-check HTTP/1.1" 25116 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8006739616394042968750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8054809570312500000000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8024899959564208984375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8012099266052246093750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8157000541687011718750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8144938945770263671875 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8404018878936767578125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8361220359802246093750 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8411130905151367187500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.8322160243988037109375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:29:59 +0000] "GET /.env HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691798.9872989654541015625000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:29:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785691799.1114981174468994140625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /.env.prod HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /.env.bak HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /actuator/env HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /.env.save HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /.env.old HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /env HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
35.236.37.219 - - - 404 MISS - - [02/Aug/2026:17:30:00 +0000] "GET /.env.dev HTTP/1.1" 35254 "-" "crusader-worker/1.0" "35.236.37.219, 35.236.37.219, 35.236.37.219, 35.236.37.219"
20.104.16.169 - - - 403 BYPASS - - [02/Aug/2026:17:42:29 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 385 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - - - 404 MISS - - [02/Aug/2026:17:42:30 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 433 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FAD6F6F6A4305FF0602F15103 - 404 MISS - - [02/Aug/2026:17:42:31 +0000] "GET /24.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBB5C6E6AC8DD7D9F02B66703 - 404 MISS - - [02/Aug/2026:17:42:32 +0000] "GET /error_log.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBB5C6E6AC8DD7D9F02B66703 - 404 MISS - - [02/Aug/2026:17:42:33 +0000] "GET /wso.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:33 +0000] "GET /file59.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:34 +0000] "GET /NewFile.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:34 +0000] "GET /mpxct.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:35 +0000] "GET /ws71.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:35 +0000] "GET /ww3.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:36 +0000] "GET /h02ugyh.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:38 +0000] "GET /asd.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:39 +0000] "GET /lzyrj.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:41 +0000] "GET /wkwk.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:42 +0000] "GET /ccc.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F58DD6E6A4305FF0602CD2303 - 404 MISS - - [02/Aug/2026:17:42:42 +0000] "GET /v.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:43 +0000] "GET /kdgok.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:43 +0000] "GET /666.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:43 +0000] "GET /wp-p2r3q9c8k4.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:45 +0000] "GET /coenoecic.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:45 +0000] "GET /god4m.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:46 +0000] "GET /show/asa.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:47 +0000] "GET //admin.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:48 +0000] "GET /green.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:42:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785692571.9937849044799804687500 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:52 +0000] "GET /sa.php7 HTTP/1.1" 35166 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F4ADD6E6A4305FF0602A32303 - 404 MISS - - [02/Aug/2026:17:42:52 +0000] "GET /ss.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FE3C56E6A4305FF0602021B03 - 404 MISS - - [02/Aug/2026:17:42:53 +0000] "GET /case.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FE3C56E6A4305FF0602021B03 - 403 BYPASS - - [02/Aug/2026:17:42:54 +0000] "GET /wp-content/radio.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FE3C56E6A4305FF0602021B03 - 404 MISS - - [02/Aug/2026:17:42:55 +0000] "GET /edit.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F57DD6E6A4305FF0602CC2303 - 404 MISS - - [02/Aug/2026:17:42:56 +0000] "GET /budmachine/web/s.php?p= HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F57DD6E6A4305FF0602CC2303 - 404 MISS - - [02/Aug/2026:17:42:56 +0000] "GET /autoload_classmap.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5A406F6A4305FF0602BA4503 - 404 MISS - - [02/Aug/2026:17:42:57 +0000] "GET /kao.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5A406F6A4305FF0602BA4503 - 404 MISS - - [02/Aug/2026:17:42:59 +0000] "GET /t.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:02 +0000] "GET /jjrpo.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 403 BYPASS - - [02/Aug/2026:17:43:02 +0000] "GET /wp-content/w.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:04 +0000] "GET /php_info.php~ HTTP/1.1" 35166 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:04 +0000] "GET /Contrller.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:05 +0000] "GET /disquiet.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 403 BYPASS - - [02/Aug/2026:17:43:05 +0000] "GET /wp-content/ioxi-o.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:06 +0000] "GET /6kUgr4yGzxN.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:07 +0000] "GET /duplicand.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:08 +0000] "GET /qaez.php56 HTTP/1.1" 35166 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FBFF86E6A4305FF0602DA2F03 - 404 MISS - - [02/Aug/2026:17:43:09 +0000] "GET /tool.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:09 +0000] "GET /disengaging.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:10 +0000] "GET /LvCBeZWaSgQ.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:11 +0000] "GET /mudxizxnc.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:12 +0000] "GET /wp-includes/fonts/about.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:12 +0000] "GET /66.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:13 +0000] "GET /index/function.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 403 BYPASS - - [02/Aug/2026:17:43:13 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 BYPASS - - [02/Aug/2026:17:43:14 +0000] "GET /wp-admin/images/wp-signup.php HTTP/1.1" 299 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602163003 - 404 MISS - - [02/Aug/2026:17:43:14 +0000] "GET /adminfuns.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:14 +0000] "GET /click.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:15 +0000] "GET /momo.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:15 +0000] "GET /unbalanceable.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:16 +0000] "GET /gdn.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:17 +0000] "GET /wan.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:17 +0000] "GET /enclas.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:18 +0000] "GET /yas.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:19 +0000] "GET /lock.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:19 +0000] "GET /wso-x569.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:21 +0000] "GET /assacc.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:22 +0000] "GET /bo.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:23 +0000] "GET /gmanz.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:24 +0000] "GET /z57.php?p= HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:25 +0000] "GET /8.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:26 +0000] "GET /gm.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 BYPASS - - [02/Aug/2026:17:43:27 +0000] "GET /wp-admin/css/bolt.php HTTP/1.1" 299 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:28 +0000] "GET /laudq.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:29 +0000] "GET /undel.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:30 +0000] "GET /pwyjwrfr.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:32 +0000] "GET /ioxi002.PhP7 HTTP/1.1" 35166 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:33 +0000] "GET /wen.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:34 +0000] "GET /dx.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:35 +0000] "GET /ios.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:36 +0000] "GET /wp-includes/IXR/admin.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:37 +0000] "GET /x3.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:38 +0000] "GET /aduot.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:38 +0000] "GET /sx.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:38 +0000] "GET /lp6.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 403 BYPASS - - [02/Aug/2026:17:43:39 +0000] "GET /wp-admin/includes/nav.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:40 +0000] "GET /wp-blog.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:40 +0000] "GET /xwpg.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F3BDD6E6A4305FF0602752303 - 404 MISS - - [02/Aug/2026:17:43:41 +0000] "GET /av.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 403 BYPASS - - [02/Aug/2026:17:43:42 +0000] "GET /wp-content/uploads/about.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:44 +0000] "GET /test.php.orig HTTP/1.1" 35166 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:44 +0000] "GET /02.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:44 +0000] "GET /apk.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:44 +0000] "GET /wp-includes/fonts/index.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:45 +0000] "GET /sa.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:46 +0000] "GET /bolt.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:46 +0000] "GET /we.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:47 +0000] "GET /rupvs.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:49 +0000] "GET /qhLaGswd9DS.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:50 +0000] "GET /fns.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:52 +0000] "GET /crgio.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FD0F86E6A4305FF0602153003 - 404 MISS - - [02/Aug/2026:17:43:53 +0000] "GET /bthil.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F67406F6A4305FF0602DF4503 - 404 MISS - - [02/Aug/2026:17:43:53 +0000] "GET /zwso.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5B406F6A4305FF0602BD4503 - 404 MISS - - [02/Aug/2026:17:43:53 +0000] "GET /diagnostic.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5B406F6A4305FF0602BD4503 - 404 MISS - - [02/Aug/2026:17:43:54 +0000] "GET /bbn.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5B406F6A4305FF0602BD4503 - 404 MISS - - [02/Aug/2026:17:43:54 +0000] "GET /bes.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5B406F6A4305FF0602BD4503 - 404 MISS - - [02/Aug/2026:17:43:55 +0000] "GET /485.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5B406F6A4305FF0602BD4503 - 404 MISS - - [02/Aug/2026:17:43:55 +0000] "GET /un.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F5B406F6A4305FF0602BD4503 - 404 MISS - - [02/Aug/2026:17:43:56 +0000] "GET /.well-known/admin.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F48DD6E6A4305FF06029C2303 - 404 MISS - - [02/Aug/2026:17:43:56 +0000] "GET /parturiency.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:43:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785692638.1616709232330322265625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
20.104.16.169 - _uid=0100007F48DD6E6A4305FF06029C2303 - 404 MISS - - [02/Aug/2026:17:43:58 +0000] "GET /info.php.bak HTTP/1.1" 35166 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F48DD6E6A4305FF06029C2303 - 404 MISS - - [02/Aug/2026:17:43:59 +0000] "GET /atomlib.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:43:59 +0000] "GET /ar/mgsl.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:44:00 +0000] "GET /783de.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 403 BYPASS - - [02/Aug/2026:17:44:00 +0000] "GET /wp-content/about.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 403 BYPASS - - [02/Aug/2026:17:44:02 +0000] "GET /wp-content/aws.php HTTP/1.1" 297 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:44:03 +0000] "GET /gfd.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:44:04 +0000] "GET /hel.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:44:05 +0000] "GET /kdrex.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:44:06 +0000] "GET /raiz0.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F54DD6E6A4305FF0602C02303 - 404 MISS - - [02/Aug/2026:17:44:07 +0000] "GET /network.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FDFC56E6A4305FF0602F61A03 - 404 MISS - - [02/Aug/2026:17:44:08 +0000] "GET /khgdl.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007FDFC56E6A4305FF0602F61A03 - 404 MISS - - [02/Aug/2026:17:44:08 +0000] "GET /hplfuns.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F67406F6A4305FF0602DE4503 - 404 MISS - - [02/Aug/2026:17:44:09 +0000] "GET /wp-64wscx6shd.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
20.104.16.169 - _uid=0100007F67406F6A4305FF0602DE4503 - 404 MISS - - [02/Aug/2026:17:44:10 +0000] "GET /sid3.php HTTP/1.1" 345 "-" "-" "20.104.16.169, 20.104.16.169, 20.104.16.169, 20.104.16.169"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:17:53:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785693197.9402139186859130859375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
152.228.213.32 - - - 200 BYPASS - - [02/Aug/2026:17:53:18 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.228.213.32, 152.228.213.32, 152.228.213.32, 152.228.213.32"
152.228.213.32 - _uid=0100007F0E846F6A4305FF0602915903 - 200 BYPASS - - [02/Aug/2026:17:53:20 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "152.228.213.32, 152.228.213.32, 152.228.213.32, 152.228.213.32"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:18:00:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785693602.3634510040283203125000 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:18:30:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785695402.5350949764251708984375 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:18:42:46 +0000] "POST /wp-cron.php?doing_wp_cron=1785696166.3729660511016845703125 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
103.7.8.203 - - - 200 BYPASS - - [02/Aug/2026:18:42:46 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.7.8.203, 103.7.8.203, 103.7.8.203, 103.7.8.203"
103.7.8.203 - _uid=0100007FA68F6F6A4305FF0602EA5B03 - 200 BYPASS - - [02/Aug/2026:18:42:48 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "103.7.8.203, 103.7.8.203, 103.7.8.203, 103.7.8.203"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:18:48:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785696498.2359468936920166015625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"
184.168.126.180 - - - 200 BYPASS - - [02/Aug/2026:18:48:18 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180"
184.168.126.180 - _uid=0100007FF2906F6A4305FF0602375C03 - 200 BYPASS - - [02/Aug/2026:18:48:20 +0000] "POST /wp-login.php HTTP/1.1" 2908 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "184.168.126.180, 184.168.126.180, 184.168.126.180, 184.168.126.180"
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:19:00:02 +0000] "POST /wp-cron.php?doing_wp_cron=1785697202.3516409397125244140625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53"