/home/hoyfacturo/cfdii.hoyfacturo.com/79TuBbJIiLN.php

105.235.139.161 - - [16/May/2026:13:36:26 +0000] "GET /wp-login.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" 105.235.139.161 - - [16/May/2026:13:36:28 +0000] "GET /administrator/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.88 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:36:30 +0000] "GET /user/login HTTP/1.1" 500 944 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:36:33 +0000] "GET /user HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Gecko/20100101 Firefox/118.0.2" 105.235.139.161 - - [16/May/2026:13:36:35 +0000] "GET /admin HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.57 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:38:54 +0000] "GET /administrator/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:38:56 +0000] "GET /administrator/index.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:38:58 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:01 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:03 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:05 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:07 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:10 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:14 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:16 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:22 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:24 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:27 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:30 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:32 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:34 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:36 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:38 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:40 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:42 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:44 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:46 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:48 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:50 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:52 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:54 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:56 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:57 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:39:59 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:01 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:04 +0000] "GET /wp-admin/install.php?step=2 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:06 +0000] "GET /wp-admin/setup-config.php?step=1 HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:08 +0000] "GET /wp-login.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:10 +0000] "GET /wp-admin/style.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:15 +0000] "GET /new.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:17 +0000] "GET /wefile.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:19 +0000] "GET /css HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:21 +0000] "GET /wp-includes/wp-includes_function.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:23 +0000] "GET /TRXscanner.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:25 +0000] "GET /amplp.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:27 +0000] "GET /wp-content/style.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:28 +0000] "GET /wp-includes/style.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:31 +0000] "GET /wp.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:32 +0000] "GET /file.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:39 +0000] "GET /wp-content/akp.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:41 +0000] "GET /aw.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:43 +0000] "GET /wp-content/plugins/geu/geu.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:45 +0000] "GET /simple.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:47 +0000] "GET /wp-login.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:49 +0000] "GET /xmlrpc.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:51 +0000] "GET /admin.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:52 +0000] "GET /install.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:54 +0000] "GET /wp-blog-header.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:56 +0000] "GET /wp-cli.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:40:58 +0000] "GET /options.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:00 +0000] "GET /click.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:02 +0000] "GET /saiga.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:03 +0000] "GET /gifclass.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:05 +0000] "GET /cord.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:07 +0000] "GET /3.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:09 +0000] "GET /BDKR28WP.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:11 +0000] "GET /inputs.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:13 +0000] "GET /wp-cron.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:14 +0000] "GET /uploads/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:16 +0000] "GET /images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:17 +0000] "GET /js/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:19 +0000] "GET /includes/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:21 +0000] "GET /inc/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:23 +0000] "GET /.tmp/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:24 +0000] "GET /assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:26 +0000] "GET /wp-content/uploads/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:28 +0000] "GET /wp-content/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:30 +0000] "GET /wp-content/js/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:31 +0000] "GET /wp-includes/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:33 +0000] "GET /wp-includes/js/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:35 +0000] "GET /wp-admin/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:36 +0000] "GET /wp-admin/js/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:38 +0000] "GET /shell.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:40 +0000] "GET /c99.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:41 +0000] "GET /r57.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:43 +0000] "GET /wp-content/backup.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:45 +0000] "GET /wp-admin/user/c99.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:46 +0000] "GET /wp-includes/c99.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:49 +0000] "GET /images/shell.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:53 +0000] "GET /uploads/shell.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:55 +0000] "GET /assets/shell.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:57 +0000] "GET /js/myshell.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:41:58 +0000] "GET /inc/backdoor.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:00 +0000] "GET /includes/shell.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:01 +0000] "GET /.tmp/c99.php HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:03 +0000] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:05 +0000] "GET /wp-content/themes/twentytwentythree/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:07 +0000] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:08 +0000] "GET /wp-content/themes/twentytwentytwo/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:10 +0000] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:11 +0000] "GET /wp-content/themes/twentytwentyone/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:13 +0000] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:15 +0000] "GET /wp-content/themes/twentytwenty/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:16 +0000] "GET /wp-content/themes/twentynineteen/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:18 +0000] "GET /wp-content/themes/twentynineteen/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:19 +0000] "GET /wp-content/themes/astra/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:21 +0000] "GET /wp-content/themes/astra/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:22 +0000] "GET /wp-content/themes/hello-elementor/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:24 +0000] "GET /wp-content/themes/hello-elementor/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:25 +0000] "GET /wp-content/themes/generatepress/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:27 +0000] "GET /wp-content/themes/generatepress/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:28 +0000] "GET /wp-content/themes/oceanwp/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:30 +0000] "GET /wp-content/themes/oceanwp/images/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:31 +0000] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:33 +0000] "GET /wp-content/plugins/contact-form-7/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:34 +0000] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:36 +0000] "GET /wp-content/plugins/woocommerce/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:37 +0000] "GET /wp-content/plugins/akismet/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:39 +0000] "GET /wp-content/plugins/akismet/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:40 +0000] "GET /wp-content/plugins/jetpack/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:42 +0000] "GET /wp-content/plugins/jetpack/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:44 +0000] "GET /wp-content/plugins/elementor/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:45 +0000] "GET /wp-content/plugins/elementor/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:47 +0000] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:49 +0000] "GET /wp-content/plugins/wordpress-seo/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:50 +0000] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:52 +0000] "GET /wp-content/plugins/classic-editor/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:53 +0000] "GET /wp-content/plugins/wpforms-lite/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:55 +0000] "GET /wp-content/plugins/wpforms-lite/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:56 +0000] "GET /wp-content/plugins/updraftplus/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:58 +0000] "GET /wp-content/plugins/updraftplus/assets/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:42:59 +0000] "GET /wp-content/uploads/2026/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:43:01 +0000] "GET /wp-content/uploads/2026/01/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:43:02 +0000] "GET /wp-content/uploads/2025/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:43:04 +0000] "GET /wp-content/uploads/2025/01/ HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 105.235.139.161 - - [16/May/2026:13:43:05 +0000] "GET /images/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:07 +0000] "GET /assets/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:08 +0000] "GET /.well-known/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:10 +0000] "GET /uploads/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:11 +0000] "GET /js/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:13 +0000] "GET /includes/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:14 +0000] "GET /inc/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:16 +0000] "GET /.tmp/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:17 +0000] "GET /wp-content/uploads/2015/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:19 +0000] "GET /wp-content/uploads/2016/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:20 +0000] "GET /wp-content/uploads/2017/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:22 +0000] "GET /wp-content/uploads/2018/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:23 +0000] "GET /wp-content/uploads/2019/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:25 +0000] "GET /wp-content/uploads/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:26 +0000] "GET /wp-includes/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:28 +0000] "GET /wp-admin/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:30 +0000] "GET /wp-content/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:32 +0000] "GET /wp-content/themes/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:33 +0000] "GET /wp-content/themes/twentytwentythree/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:35 +0000] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:36 +0000] "GET /wp-content/themes/twentytwentyone/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:38 +0000] "GET /wp-content/themes/twentytwenty/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:39 +0000] "GET /wp-content/themes/twentynineteen/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:41 +0000] "GET /wp-content/plugins/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:42 +0000] "GET /wp-content/plugins/contact-form-7/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:44 +0000] "GET /wp-content/plugins/woocommerce/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:45 +0000] "GET /wp-content/plugins/akismet/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:47 +0000] "GET /wp-content/plugins/jetpack/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:48 +0000] "GET /wp-content/plugins/elementor/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:50 +0000] "GET /wp-content/plugins/wordpress-seo/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:51 +0000] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:53 +0000] "GET /wp-content/plugins/wpforms-lite/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:54 +0000] "GET /wp-content/plugins/updraftplus/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:56 +0000] "GET /wp-content/plugins/wordfence/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:57 +0000] "GET /wp-content/cache/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:43:59 +0000] "GET /wp-content/wflogs/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:01 +0000] "GET /wp-content/upgrade/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:02 +0000] "GET /wp-admin/includes/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:04 +0000] "GET /wp-admin/images/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:05 +0000] "GET /wp-admin/js/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:07 +0000] "GET /wp-admin/css/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:09 +0000] "GET /wp-includes/images/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:10 +0000] "GET /wp-includes/js/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:12 +0000] "GET /wp-includes/css/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:13 +0000] "GET /wp-content/images/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:15 +0000] "GET /wp-content/js/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:16 +0000] "GET /wp-content/includes/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:18 +0000] "GET /wp-content/inc/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:19 +0000] "GET /wp-content/.tmp/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 105.235.139.161 - - [16/May/2026:13:44:21 +0000] "GET /wp-content/assets/ HTTP/1.1" 500 944 "-" "python-requests/2.32.3" 77.68.2.199 - - [16/May/2026:13:53:07 +0000] "POST /bcgezxl/mtpuhvj/ajiozcg/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:13:53:08 +0000] "GET /bcgezxl/mtpuhvj/ajiozcg/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:13:53:09 +0000] "POST /bcgezxl/mtpuhvj/ajiozcg/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:13:53:10 +0000] "GET /bcgezxl/mtpuhvj/ajiozcg/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 204.12.208.18 - - [16/May/2026:13:54:29 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 403 162078 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/4.0 (compatible; GoogleToolbar 5.0.2124.2070; Windows 6.0; MSIE 8.0.6001.18241)" 204.12.208.18 - - [16/May/2026:13:54:30 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.24 (KHTML, like Gecko) Iron/11.0.700.2 Chrome/11.0.700.2 Safari/534.24" 204.12.208.18 - - [16/May/2026:13:54:31 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.2 (KHTML, like Gecko) Ubuntu/10.04 Chromium/15.0.874.106 Chrome/15.0.874.106 Safari/535.2" 87.106.152.203 - - [16/May/2026:13:56:02 +0000] "GET /ayskdlb/cfori1g/klaijgh/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.58.50.99 - - [16/May/2026:13:56:15 +0000] "GET /VMjS1cUqOkN.php?pass=39nPYiFATvj HTTP/1.1" 500 944 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.0.0 Safari/537.36" 77.68.2.199 - - [16/May/2026:14:02:20 +0000] "POST /ayskdlb/cfori1g/klaijgh/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:02:21 +0000] "GET /ayskdlb/cfori1g/klaijgh/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:02:22 +0000] "POST /ayskdlb/cfori1g/klaijgh/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:02:23 +0000] "GET /ayskdlb/cfori1g/klaijgh/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:09:58 +0000] "POST /vr1gxjy/scidaxf/vboljfs/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:10:00 +0000] "GET /vr1gxjy/scidaxf/vboljfs/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:10:02 +0000] "POST /vr1gxjy/scidaxf/vboljfs/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:10:04 +0000] "GET /vr1gxjy/scidaxf/vboljfs/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 204.12.208.18 - - [16/May/2026:14:30:56 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.7 (KHTML, like Gecko) Chrome/16.0.912.75 Safari/535.7" 204.12.208.18 - - [16/May/2026:14:30:57 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_5; ja-jp) AppleWebKit/525.26.2 (KHTML, like Gecko) Version/3.2 Safari/525.26.12" 204.12.208.18 - - [16/May/2026:14:30:59 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1)" 77.68.2.199 - - [16/May/2026:14:37:07 +0000] "POST /JxAVnHsQSg.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:37:09 +0000] "GET /admin.php HTTP/1.1" 200 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:37:10 +0000] "POST /JxAVnHsQSg.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:14:37:11 +0000] "GET /admin.php HTTP/1.1" 200 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 87.106.152.203 - - [16/May/2026:14:56:59 +0000] "GET /tqj1iph/yhjkspt/fzyweir/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 204.12.208.18 - - [16/May/2026:15:06:30 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:5.0) Gecko/20100101 Firefox/5.0" 204.12.208.18 - - [16/May/2026:15:06:31 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_6_3; ja-jp) AppleWebKit/531.21.11 (KHTML, like Gecko) Version/4.0.4 Safari/531.21.10" 204.12.208.18 - - [16/May/2026:15:06:32 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.1)" 66.132.172.100 - - [16/May/2026:15:06:42 +0000] "GET / HTTP/1.1" 500 944 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 87.106.152.203 - - [16/May/2026:15:23:44 +0000] "GET /vr1gxjy/scidaxf/vboljfs/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:26:22 +0000] "POST /ufmsgzo/gwridsh/qefipcz/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:26:27 +0000] "GET /ufmsgzo/gwridsh/qefipcz/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:26:32 +0000] "POST /ufmsgzo/gwridsh/qefipcz/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:26:36 +0000] "GET /ufmsgzo/gwridsh/qefipcz/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:35:45 +0000] "POST /tqj1iph/yhjkspt/fzyweir/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:35:49 +0000] "GET /tqj1iph/yhjkspt/fzyweir/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:35:55 +0000] "POST /tqj1iph/yhjkspt/fzyweir/index.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:15:35:59 +0000] "GET /tqj1iph/yhjkspt/fzyweir/admin.php HTTP/1.1" 403 984 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 204.12.208.18 - - [16/May/2026:15:42:15 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:9.0.1) Gecko/20100101 Firefox/9.0.1" 204.12.208.18 - - [16/May/2026:15:42:17 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/4.0 (compatible; MSIE 6.0; X11; Linux i686; ja) Opera 10.10" 204.12.208.18 - - [16/May/2026:15:42:18 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 500 944 "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0; SLCC1; .NET CLR 2.0.50727; Media Center PC 5.0; .NET CLR 3.0.04506; InfoPath.1)" 204.12.208.18 - - [16/May/2026:16:17:43 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Windows NT 5.1; rv:6.0) Gecko/20100101 Firefox/6.0" 77.68.2.199 - - [16/May/2026:16:23:25 +0000] "POST /tzfcndx/b1sydua/qktw1va/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:16:23:27 +0000] "GET /tzfcndx/b1sydua/qktw1va/admin.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:16:23:30 +0000] "POST /tzfcndx/b1sydua/qktw1va/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:16:23:32 +0000] "GET /tzfcndx/b1sydua/qktw1va/admin.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 87.106.152.203 - - [16/May/2026:16:24:05 +0000] "GET /tzfcndx/b1sydua/qktw1va/index.php HTTP/1.1" 404 - "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 45.227.253.15 - - [16/May/2026:16:44:55 +0000] "GET /index.php/jk HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:72.0) Gecko/20100101 Firefox/72.0" 204.12.208.18 - - [16/May/2026:16:53:54 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.2 (KHTML, like Gecko) Ubuntu/10.04 Chromium/15.0.874.106 Chrome/15.0.874.106 Safari/535.2" 204.12.208.18 - - [16/May/2026:17:29:16 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:7.0.1) Gecko/20100101 Firefox/7.0.1" 74.7.244.63 - - [16/May/2026:17:53:25 +0000] "GET /robots.txt HTTP/1.1" 404 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.3; robots.txt; +https://openai.com/searchbot" 74.7.243.202 - - [16/May/2026:17:53:25 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:28 +0000] "GET /?C=S;O=A HTTP/1.1" 200 482 "https://php.hoyfacturo.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:32 +0000] "GET /?C=M;O=A HTTP/1.1" 200 482 "https://php.hoyfacturo.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:35 +0000] "GET /?C=N;O=D HTTP/1.1" 200 482 "https://php.hoyfacturo.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:38 +0000] "GET /?C=D;O=A HTTP/1.1" 200 482 "https://php.hoyfacturo.com/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:41 +0000] "GET /?C=N;O=A HTTP/1.1" 200 482 "https://php.hoyfacturo.com/?C=S;O=A" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:44 +0000] "GET /?C=S;O=D HTTP/1.1" 200 482 "https://php.hoyfacturo.com/?C=S;O=A" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:48 +0000] "GET /?C=M;O=D HTTP/1.1" 200 482 "https://php.hoyfacturo.com/?C=M;O=A" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 74.7.243.202 - - [16/May/2026:17:53:51 +0000] "GET /?C=D;O=D HTTP/1.1" 200 482 "https://php.hoyfacturo.com/?C=D;O=A" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 204.12.208.18 - - [16/May/2026:18:04:07 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.24 (KHTML, like Gecko) Chrome/11.0.696.71 Safari/534.24" 45.227.253.15 - - [16/May/2026:18:30:28 +0000] "GET /?of=1 HTTP/1.1" 200 482 "-" "Mozilla/5.0 (iPad; U; CPU OS 4_3_4 like Mac OS X; ja) AppleWebKit/533.17.9 (KHTML, like Gecko) Version/5.0.2 Mobile/8J2 Safari/6533.18.5" 101.99.88.90 - - [16/May/2026:18:32:22 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "-" "-" 204.12.208.18 - - [16/May/2026:18:39:28 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; MAGW; .NET4.0C; Lunascape 6.5.8.24780)" 45.227.253.15 - - [16/May/2026:18:46:02 +0000] "GET /index.php/jk HTTP/1.1" 404 16 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:82.0) Gecko/20100101 Firefox/82.0" 45.227.253.15 - - [16/May/2026:18:55:33 +0000] "GET /tvmdx1w/uatzjfy/uatzjfy/index.php?ARRAY=7o2230223n313737383936313832352p2231223n22687474703n5p2s5p2s7n733037656r2r6p6171756s2r776s726o5p2s3s6p633q7068705s636s64655s6n6326743q313737383935383232352q3030323238336638663864373733306537656632313539336530323536643933222p2232223n223263616539353766663138323565613665666630303134633763663763383932222p2233223n226638613531633563383166656138353739393038393634373032363437643264222p2262696r675s70617373223n2232342q33392q35342q36322q38302q38312q3135227q HTTP/1.1" 404 - "-" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:74.0) Gecko/20100101 Firefox/74.0" 204.12.208.18 - - [16/May/2026:19:14:30 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/14.0.835.202 Safari/535.1" 101.99.88.90 - - [16/May/2026:19:27:46 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "-" "-" 204.12.208.18 - - [16/May/2026:19:50:09 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Opera/9.80 (Windows NT 6.1; U; ja) Presto/2.9.168 Version/11.50" 176.65.139.229 - - [16/May/2026:20:09:40 +0000] "GET / HTTP/1.1" 200 482 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 204.12.208.18 - - [16/May/2026:20:24:59 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; SV1)" 8.228.74.29 - - [16/May/2026:20:39:56 +0000] "GET /.git/config HTTP/1.1" 404 - "-" "-" 77.68.2.199 - - [16/May/2026:20:44:09 +0000] "POST /JxAVnHsQSg.php HTTP/1.1" 404 16 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:20:44:11 +0000] "GET /admin.php HTTP/1.1" 404 16 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:20:44:14 +0000] "POST /JxAVnHsQSg.php HTTP/1.1" 404 16 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 77.68.2.199 - - [16/May/2026:20:44:16 +0000] "GET /admin.php HTTP/1.1" 404 16 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 204.12.208.18 - - [16/May/2026:21:01:40 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/534.30 (KHTML, like Gecko) Chrome/12.0.742.112 Safari/534.30" 101.99.88.90 - - [16/May/2026:21:13:55 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "-" "-" 204.12.208.18 - - [16/May/2026:21:36:28 +0000] "GET /wp-includes/br6975c8/index.php HTTP/1.1" 404 - "https://php.hoyfacturo.com/wp-includes/br6975c8/index.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:5.0.1) Gecko/20100101 Firefox/5.0.1"