WS_OK_7.4.33
37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:00:00:03 +0000] "POST /wp-cron.php?doing_wp_cron=1785628802.6598839759826660156250 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53" 37.27.52.53 - - - 200 BYPASS - - [02/Aug/2026:00:02:13 +0000] "POST /wp-cron.php?doing_wp_cron=1785628933.3758471012115478515625 HTTP/1.1" 241 "-" "WordPress/7.0.2; https://lcaportalstoreg.liceclinicsofamerica.com" "37.27.52.53, 37.27.52.53, 37.27.52.53, 37.27.52.53" 69.57.172.96 - - - 200 BYPASS - - [02/Aug/2026:00:02:14 +0000] "GET /wp-login.php HTTP/1.1" 2872 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.96, 69.57.172.96, 69.57.172.96, 69.57.172.96" 69.57.172.96 - _uid=0100007F06896E6A4305FF06020F0303 - 200 BYPASS - - [02/Aug/2026:00:02:15 +0000] "POST /wp-login.php HTTP/1.1" 2907 "https://lcaportalstoreg.liceclinicsofamerica.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "69.57.172.96, 69.57.172.96, 69.57.172.96, 69.57.172.96" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:28 +0000] "GET /--wp-lgj.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:28 +0000] "GET /.tmb/admin.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:28 +0000] "GET /.tmb/la.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 BYPASS - - [02/Aug/2026:00:20:28 +0000] "GET /.tmb/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:29 +0000] "GET /.well-known/.well-known/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:29 +0000] "GET /.well-known//.well-known/owlmailer.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:29 +0000] "GET /.well-known/991176.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/acme-challenge/file HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:30 +0000] "GET /.well-known/caches.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/elp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/pki-validation/classwithtostring.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:31 +0000] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:32 +0000] "GET /.well-known/pki-validation/min.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:32 +0000] "GET /2014/02/mt_srand.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:32 +0000] "GET /_podt.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:32 +0000] "GET /aaa.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:33 +0000] "GET /aahana/json.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:33 +0000] "GET /abcd.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:33 +0000] "GET /about.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:33 +0000] "GET /admin.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:34 +0000] "GET /admin/fckeditor/editor/filemanager/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:34 +0000] "GET /admin/uploads/images/ HTTP/1.1" 35245 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:34 +0000] "GET /ahax.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /alera/alpha.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /alfa-rex.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /app.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:35 +0000] "GET /appwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:36 +0000] "GET /astra/inc/fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:36 +0000] "GET /autoload_classmap.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:36 +0000] "GET /bless.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:36 +0000] "GET /cgi-bin/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:37 +0000] "GET /cgi-binwp.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:37 +0000] "GET /class-wp-application-passwords.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 MISS - - [02/Aug/2026:00:20:37 +0000] "GET /classwithtostring.php HTTP/1.1" 492 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:37 +0000] "GET /cloud.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /co.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /codemirror/about.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /colors/blue/info.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:38 +0000] "GET /colors/coffee/shells.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:39 +0000] "GET /colors/midnight/priv.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:39 +0000] "GET /content.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 BYPASS - - [02/Aug/2026:00:20:39 +0000] "GET /css/wp-login.php HTTP/1.1" 387 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:39 +0000] "GET /dex.php HTTP/1.1" 432 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /docsbypass.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /dropdown.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /env.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:40 +0000] "GET /eror.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:41 +0000] "GET /file4.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:41 +0000] "GET /fm.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139" 20.215.191.139 - - - 404 HIT - - [02/Aug/2026:00:20:41 +0000] "GET /form.php HTTP/1.1" 491 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" "20.215.191.139, 20.215.191.139, 20.215.191.139, 20.215.191.139"