/home/tywatomy/access-logs/en.ariapress.org
162.240.68.55 - - [01/Aug/2026:06:33:30 -0600] "POST /wp-cron.php?doing_wp_cron=1785587610.5837810039520263671875 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 54.161.230.166 - - [01/Aug/2026:06:33:29 -0600] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 clst-pab" 103.253.24.124 - - [01/Aug/2026:07:46:36 -0600] "GET / HTTP/1.1" 301 - "-" "wp2shell-rce/1.0" 103.253.24.124 - - [01/Aug/2026:07:46:42 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 400 125 "-" "wp2shell-rce/1.0" 103.253.24.124 - - [01/Aug/2026:07:46:45 -0600] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 103.253.24.124 - - [01/Aug/2026:07:46:45 -0600] "GET / HTTP/1.1" 301 - "-" "wp2shell-rce/1.0" 103.253.24.124 - - [01/Aug/2026:07:46:52 -0600] "POST /?rest_route=/batch/v1 HTTP/1.1" 400 125 "-" "wp2shell-rce/1.0" 103.253.24.124 - - [01/Aug/2026:07:46:54 -0600] "GET / HTTP/1.1" 301 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.local HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.dev HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.old HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.example HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.bak HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.backup HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.production HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.prod HTTP/1.1" 301 - "-" "crusader-worker/1.0" 34.180.28.199 - - [01/Aug/2026:10:29:39 -0600] "GET /.env.save HTTP/1.1" 301 - "-" "crusader-worker/1.0" 196.18.165.91 - - [01/Aug/2026:16:50:09 -0600] "GET /wp-login.php HTTP/1.1" 403 17006 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 196.18.165.91 - - [01/Aug/2026:16:50:12 -0600] "GET /wp-login.php HTTP/1.1" 403 17006 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 196.18.165.91 - - [01/Aug/2026:16:50:14 -0600] "POST /wp-login.php HTTP/1.1" 403 17006 "en.ariapress.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 196.18.165.91 - - [01/Aug/2026:16:50:16 -0600] "GET /wp-admin/ HTTP/1.1" 403 17006 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 162.240.68.55 - - [01/Aug/2026:16:50:20 -0600] "POST /wp-cron.php?doing_wp_cron=1785624620.4894928932189941406250 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 196.18.165.91 - - [01/Aug/2026:16:50:19 -0600] "GET /wp-login.php HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 196.18.165.91 - - [01/Aug/2026:16:50:50 -0600] "GET /wp-admin/ HTTP/1.1" 302 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 162.240.68.55 - - [01/Aug/2026:17:26:51 -0600] "POST /wp-cron.php?doing_wp_cron=1785626811.5335929393768310546875 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 187.40.240.65 - - [01/Aug/2026:17:26:50 -0600] "POST /wp-login.php HTTP/1.1" 302 - "http://en.ariapress.org/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36" 162.240.68.55 - - [01/Aug/2026:18:14:38 -0600] "POST /wp-cron.php?doing_wp_cron=1785629678.0566189289093017578125 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 72.146.20.230 - - [01/Aug/2026:18:14:37 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:14:38 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:14:39 -0600] "GET /IndoSec.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:14:40 -0600] "GET /1revo.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:14:41 -0600] "GET /loader.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:14:43 -0600] "GET /esp.php? HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:14:44 -0600] "GET /dj.php HTTP/1.1" 404 69395 "-" "-" 162.240.68.55 - - [01/Aug/2026:18:34:18 -0600] "POST /wp-cron.php?doing_wp_cron=1785630858.2080049514770507812500 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 72.146.20.230 - - [01/Aug/2026:18:34:17 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:18 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:19 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:20 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:21 -0600] "GET /IndoSec.php HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:22 -0600] "GET /IndoSec.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:23 -0600] "GET /1revo.php HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:24 -0600] "GET /1revo.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:25 -0600] "GET /loader.php HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:26 -0600] "GET /loader.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:27 -0600] "GET /esp.php? HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:28 -0600] "GET /esp.php HTTP/1.1" 404 69395 "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:29 -0600] "GET /dj.php HTTP/1.1" 301 - "-" "-" 72.146.20.230 - - [01/Aug/2026:18:34:30 -0600] "GET /dj.php HTTP/1.1" 404 69395 "-" "-" 162.240.68.55 - - [01/Aug/2026:18:44:10 -0600] "POST /wp-cron.php?doing_wp_cron=1785631450.2025680541992187500000 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 157.66.55.50 - - [01/Aug/2026:18:44:09 -0600] "GET /wp-content/themes/wp-pridmag/up.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:12 -0600] "GET /simple.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:14 -0600] "GET /cong.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:17 -0600] "GET /x-cp-QD26lPMQ.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:20 -0600] "GET /xxx.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:22 -0600] "GET /tmpls.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:25 -0600] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:28 -0600] "GET /chosen.php?p= HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:28 -0600] "GET /chosen.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:34 -0600] "GET /wp-cron.php?ac=3 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:35 -0600] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:38 -0600] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:40 -0600] "GET /wp-includes/Text/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:41 -0600] "GET /wp-includes/Text/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:44 -0600] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:46 -0600] "GET /Njima.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:48 -0600] "GET /wp-admin/images/Mhbgf.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:51 -0600] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:51 -0600] "GET /wp-admin/css/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:54 -0600] "GET /wp-admin/css/ysirlifn.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:44:56 -0600] "GET /repeater.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:00 -0600] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:02 -0600] "GET /ioxi002.PhP7 HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:05 -0600] "GET /radio.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:07 -0600] "GET /radio.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:10 -0600] "GET /wp-admin/css/colors/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:11 -0600] "GET /wp-admin/css/colors/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:13 -0600] "GET /ofso64.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:15 -0600] "GET /wp-content/plugins/TOPXHOH/wDR.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:17 -0600] "GET /wp-content/plugins/IOptimize.php?rchk HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 162.240.68.55 - - [01/Aug/2026:18:45:20 -0600] "POST /wp-cron.php?doing_wp_cron=1785631520.9790310859680175781250 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 157.66.55.50 - - [01/Aug/2026:18:45:20 -0600] "GET /wp-content/themes/ccx/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:21 -0600] "GET /wp-content/themes/ccx/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:28 -0600] "GET /wp-content/uploads/2017-------/09/wp-console.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:30 -0600] "GET /wp-includes/js/crop/uword.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:33 -0600] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:36 -0600] "GET /autoload_classmap.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:41 -0600] "GET /wp-content/uploads/2014/07/olx.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:43 -0600] "GET /wp-admin/css/colors/midnight/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:44 -0600] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:47 -0600] "GET /wp-content/uploads/2020/wp-couldent.php.suspected HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:49 -0600] "GET /wp-content/plugins/523453244/ninja.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:53 -0600] "GET /wp-includes/js/imgareaselect/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:54 -0600] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:45:56 -0600] "GET /wp-includes/PHPMailer/load.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:00 -0600] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:05 -0600] "GET /wp-links.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:08 -0600] "GET /wp-aa.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:13 -0600] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:16 -0600] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:21 -0600] "GET /about.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:23 -0600] "GET /xx.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:26 -0600] "GET /wp-content/themes/digital-download/new.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:30 -0600] "GET /epinyins.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:32 -0600] "GET /wp-admin/dropdown.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:36 -0600] "GET /dropdown.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:38 -0600] "GET /wp-admin/css/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:39 -0600] "GET /wp-admin/css/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:41 -0600] "GET /wp-content/mah.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:46 -0600] "GET /wp-content/item.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:46:57 -0600] "GET /wp-content/plugins/shell/about.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:04 -0600] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:07 -0600] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:10 -0600] "GET /wp-content/plugins/ph-file-manager/wp-file.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:14 -0600] "GET /.well-known/pki-validation/wp-login.php HTTP/1.1" 404 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:15 -0600] "GET /wp-content/plugins/root-file-manager/wp-file.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:18 -0600] "GET /wp-content/plugins/wp-help/mini.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:23 -0600] "GET /wp-content/themes/travel/issue.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:26 -0600] "GET /wp-content/themes/jaida/lang.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:28 -0600] "GET /wp-l0gin.php HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:32 -0600] "GET /wp-content/plugins/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:33 -0600] "GET /wp-content/plugins/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:35 -0600] "GET /wp-content/plugins/index.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 157.66.55.50 - - [01/Aug/2026:18:47:36 -0600] "GET /wp-content/plugins/ HTTP/1.1" 404 69263 "-" "Mozilla/5.0 (Linux; Android 11; M2010J19SI) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/109.0.0.0 Mobile Safari/537.36" 196.18.164.36 - - [01/Aug/2026:21:29:39 -0600] "GET /wp-login.php HTTP/1.1" 403 17004 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 196.18.164.36 - - [01/Aug/2026:21:29:41 -0600] "GET /wp-login.php HTTP/1.1" 403 17004 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 196.18.164.36 - - [01/Aug/2026:21:29:43 -0600] "POST /wp-login.php HTTP/1.1" 403 17004 "en.ariapress.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 196.18.164.36 - - [01/Aug/2026:21:29:44 -0600] "GET /wp-admin/ HTTP/1.1" 403 17004 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0" 111.67.102.108 - - [02/Aug/2026:01:33:21 -0600] "GET /wp-login.php HTTP/1.1" 200 96694 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 111.67.102.108 - - [02/Aug/2026:01:33:25 -0600] "POST /wp-login.php HTTP/1.1" 200 96694 "http://en.ariapress.org/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 162.240.68.55 - - [02/Aug/2026:01:40:30 -0600] "POST /wp-cron.php?doing_wp_cron=1785656430.2581748962402343750000 HTTP/1.1" 200 - "-" "WordPress/7.0.2; https://en.ariapress.org" 4.223.71.149 - - [02/Aug/2026:01:40:29 -0600] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:30 -0600] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:31 -0600] "GET /err.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:32 -0600] "GET /img.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:34 -0600] "GET //aa.php HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:35 -0600] "GET //av.php HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:36 -0600] "GET /xa.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:37 -0600] "GET /media.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:39 -0600] "GET /images.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:40 -0600] "GET /xp.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:41 -0600] "GET /admin.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:42 -0600] "GET /222.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:43 -0600] "GET /mac.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:43 -0600] "GET /ops.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:44 -0600] "GET /8.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:46 -0600] "GET /biufile.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:46 -0600] "GET /coffexium.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:47 -0600] "GET /dex.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:49 -0600] "GET /1.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:50 -0600] "GET /coffee.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:51 -0600] "GET /classwithtostring.php?p= HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:52 -0600] "GET /wp-ws68.php?p= HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:53 -0600] "GET /mgrr.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:54 -0600] "GET /55.php?p= HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:55 -0600] "GET /ajax.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:56 -0600] "GET /yj09.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:56 -0600] "GET /ora.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:57 -0600] "GET /scxy.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:58 -0600] "GET /ws13.php?p= HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:40:59 -0600] "GET /btx25.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:00 -0600] "GET //xpohywjo.php HTTP/1.1" 200 96671 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:01 -0600] "GET /ecvvhlei.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:02 -0600] "GET /SDsadqwrf.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:03 -0600] "GET /ssjpxze.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:04 -0600] "GET /ors32envu.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:05 -0600] "GET /3PJcpMFsD8B.php HTTP/1.1" 200 166066 "-" "-" 4.223.71.149 - - [02/Aug/2026:01:41:06 -0600] "GET /BDKR28WP.php HTTP/1.1" 200 166066 "-" "-"
Anon7 — 2022 •
AnonSec Team