| Server IP : 69.39.225.240 / Your IP : 216.73.216.138 Web Server : Apache System : Linux bronze7.serverhost.net 3.10.0-1160.105.1.el7.x86_64 #1 SMP Thu Dec 7 15:39:45 UTC 2023 x86_64 User : reademotions ( 1074) PHP Version : 7.4.33 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : ON | Sudo : ON | Pkexec : ON Directory : /var/log/httpd/ |
Upload File : |
69.39.225.240 - - [16/Aug/2026:07:48:33 -0400] "POST /wp-cron.php?doing_wp_cron=1786880913.2251319885253906250000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.131.253.14 - - [16/Aug/2026:07:48:32 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [16/Aug/2026:07:58:02 -0400] "POST /wp-cron.php?doing_wp_cron=1786881482.2073159217834472656250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 38.107.232.38 - - [16/Aug/2026:07:58:01 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.107.232.38 - - [16/Aug/2026:07:58:04 -0400] "GET /wp-login.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.107.232.38 - - [16/Aug/2026:07:58:05 -0400] "GET /wp-admin/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:08:33:44 -0400] "POST /wp-cron.php?doing_wp_cron=1786883624.9162709712982177734375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 44.251.42.84 - - [16/Aug/2026:08:33:44 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.0 Safari/537.36 Some Company. inc admin.contact@gmail.com" 69.39.225.240 - - [16/Aug/2026:08:41:38 -0400] "POST /wp-cron.php?doing_wp_cron=1786884098.0755670070648193359375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 135.136.48.45 - - [16/Aug/2026:08:41:37 -0400] "GET /bless.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.45 - - [16/Aug/2026:08:41:38 -0400] "GET /O-Simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.45 - - [16/Aug/2026:08:41:39 -0400] "GET /lock360.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.45 - - [16/Aug/2026:08:41:39 -0400] "GET /zwso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.45 - - [16/Aug/2026:08:41:40 -0400] "GET /chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.45 - - [16/Aug/2026:08:41:41 -0400] "GET /about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 135.136.48.32 - - [16/Aug/2026:08:41:43 -0400] "GET /admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:44 -0400] "GET /mah.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:41:45 -0400] "GET /.wp/wso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:41:45 -0400] "GET /core.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 135.136.48.32 - - [16/Aug/2026:08:41:46 -0400] "GET /robots.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:41:47 -0400] "GET /inputs.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:48 -0400] "GET /mini.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.32 - - [16/Aug/2026:08:41:48 -0400] "GET /goods.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:49 -0400] "GET /file5.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 135.136.48.32 - - [16/Aug/2026:08:41:50 -0400] "GET /ahax.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:50 -0400] "GET /f35.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:51 -0400] "GET /simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:52 -0400] "GET /amax.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:52 -0400] "GET /update/f35.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:53 -0400] "GET /wp-content/hello.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.32 - - [16/Aug/2026:08:41:54 -0400] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:41:54 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:55 -0400] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:55 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:56 -0400] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:41:56 -0400] "GET /images/upload.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:57 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 135.136.48.32 - - [16/Aug/2026:08:41:57 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.32 - - [16/Aug/2026:08:41:58 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:58 -0400] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:41:59 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:00 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 135.136.48.32 - - [16/Aug/2026:08:42:00 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:00 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:01 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 135.136.48.32 - - [16/Aug/2026:08:42:02 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:02 -0400] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 135.136.48.32 - - [16/Aug/2026:08:42:03 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:03 -0400] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:04 -0400] "GET /classwithtostring.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:04 -0400] "GET /uploads/94056-upload.phtml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 135.136.48.32 - - [16/Aug/2026:08:42:05 -0400] "GET /index/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:06 -0400] "GET /tinyfilemanager.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:06 -0400] "GET /js/bas.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:07 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:07 -0400] "GET /file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.32 - - [16/Aug/2026:08:42:08 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:08 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:09 -0400] "GET /buy.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:10 -0400] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:10 -0400] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:10 -0400] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:11 -0400] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:11 -0400] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:12 -0400] "GET /admin/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:12 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:13 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:13 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:13 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.32 - - [16/Aug/2026:08:42:14 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:14 -0400] "GET /files/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:15 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.32 - - [16/Aug/2026:08:42:15 -0400] "GET /inc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:16 -0400] "GET /wp-content/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 135.136.48.32 - - [16/Aug/2026:08:42:17 -0400] "GET /filemanager.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.32 - - [16/Aug/2026:08:42:17 -0400] "GET /cgi-bin/bypass.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 135.136.48.32 - - [16/Aug/2026:08:42:18 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:18 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.32 - - [16/Aug/2026:08:42:18 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 135.136.48.32 - - [16/Aug/2026:08:42:19 -0400] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.32 - - [16/Aug/2026:08:42:19 -0400] "GET /function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 135.136.48.32 - - [16/Aug/2026:08:42:20 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:20 -0400] "GET /wp-signup.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:21 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:22 -0400] "GET /admin/upload/css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.32 - - [16/Aug/2026:08:42:23 -0400] "GET /wp-blog.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 69.39.225.240 - - [16/Aug/2026:08:42:24 -0400] "POST /wp-cron.php?doing_wp_cron=1786884144.3164470195770263671875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 135.136.48.32 - - [16/Aug/2026:08:42:23 -0400] "GET /wp-admin/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:24 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:25 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:25 -0400] "GET /wp-l0gin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 135.136.48.32 - - [16/Aug/2026:08:42:26 -0400] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 135.136.48.32 - - [16/Aug/2026:08:42:26 -0400] "GET /new.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 135.136.48.32 - - [16/Aug/2026:08:42:27 -0400] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 135.136.48.32 - - [16/Aug/2026:08:42:27 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:27 -0400] "GET /images/DJP9.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:28 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:28 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:29 -0400] "GET /natural.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:30 -0400] "GET /item.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:31 -0400] "GET /function/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.32 - - [16/Aug/2026:08:42:31 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:32 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:32 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 135.136.48.32 - - [16/Aug/2026:08:42:33 -0400] "GET /about/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 135.136.48.32 - - [16/Aug/2026:08:42:33 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:34 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:34 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 135.136.48.32 - - [16/Aug/2026:08:42:34 -0400] "GET /wp-content/languages/404.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:35 -0400] "GET /update/403.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.32 - - [16/Aug/2026:08:42:36 -0400] "GET /default.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 135.136.48.32 - - [16/Aug/2026:08:42:36 -0400] "GET /wp-includes/assets/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 135.136.48.32 - - [16/Aug/2026:08:42:37 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.32 - - [16/Aug/2026:08:42:37 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:37 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 135.136.48.32 - - [16/Aug/2026:08:42:38 -0400] "GET /autoload_classmap/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.32 - - [16/Aug/2026:08:42:39 -0400] "GET /dropdown.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.188 - - [16/Aug/2026:08:42:50 -0400] "GET /update/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:42:51 -0400] "GET /wp-content/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:42:51 -0400] "GET /wp-admin/maint/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 69.39.225.240 - - [16/Aug/2026:08:42:52 -0400] "POST /wp-cron.php?doing_wp_cron=1786884172.0484690666198730468750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 135.136.48.188 - - [16/Aug/2026:08:42:51 -0400] "GET /themes/zMousse/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 135.136.48.188 - - [16/Aug/2026:08:42:52 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:53 -0400] "GET /wp-admin/images/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:53 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 135.136.48.188 - - [16/Aug/2026:08:42:54 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:42:54 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:55 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:56 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:57 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:57 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.188 - - [16/Aug/2026:08:42:58 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:58 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:42:59 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 135.136.48.188 - - [16/Aug/2026:08:42:59 -0400] "GET /wp-content/plugins/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:00 -0400] "GET /js/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:00 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:01 -0400] "GET /wp-includes/js/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:02 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 135.136.48.188 - - [16/Aug/2026:08:43:02 -0400] "GET /wp-content/languages/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:03 -0400] "GET /wp-content/themes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:03 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:04 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 135.136.48.188 - - [16/Aug/2026:08:43:04 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:04 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:05 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.188 - - [16/Aug/2026:08:43:05 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:05 -0400] "GET /cgi-bin/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:06 -0400] "GET /wp-admin/js/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:06 -0400] "GET /wp-includes/js/jquery/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:06 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:07 -0400] "GET /wp-admin/network/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:43:07 -0400] "GET /wp-admin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:08 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:09 -0400] "GET /wp-includes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:09 -0400] "GET /wp-includes/customize/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:10 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:10 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:10 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:11 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 135.136.48.188 - - [16/Aug/2026:08:43:11 -0400] "GET /wp-content/x/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.188 - - [16/Aug/2026:08:43:12 -0400] "GET /wp-includes/assets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:12 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:12 -0400] "GET /autoload_classmap/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:13 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:14 -0400] "GET /templates/beez3/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:14 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:15 -0400] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:16 -0400] "GET /templates/beez/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:16 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:17 -0400] "GET /wp-content/uploads/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:17 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:17 -0400] "GET /css/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:18 -0400] "GET /wp-admin/user/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:19 -0400] "GET /assets/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:43:20 -0400] "GET /wp-admin/css/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:20 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:20 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:43:22 -0400] "GET /wp-content/plugins/up/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:22 -0400] "GET /fonts/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:23 -0400] "GET /wp-admin/includes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [16/Aug/2026:08:43:24 -0400] "POST /wp-cron.php?doing_wp_cron=1786884204.4506189823150634765625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 135.136.48.188 - - [16/Aug/2026:08:43:24 -0400] "GET /images/images/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:24 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:25 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:25 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 135.136.48.188 - - [16/Aug/2026:08:43:26 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:26 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 135.136.48.188 - - [16/Aug/2026:08:43:26 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:27 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:27 -0400] "GET /wp-content/cache/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 135.136.48.188 - - [16/Aug/2026:08:43:28 -0400] "GET /assets/images/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:29 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:29 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:30 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:30 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 135.136.48.188 - - [16/Aug/2026:08:43:31 -0400] "GET /wp-includes/css/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 135.136.48.188 - - [16/Aug/2026:08:43:31 -0400] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:43:32 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:32 -0400] "GET /wp-content/plugins/view-more/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:33 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:33 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 135.136.48.188 - - [16/Aug/2026:08:43:34 -0400] "GET /wp-includes/images/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:34 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 135.136.48.188 - - [16/Aug/2026:08:43:35 -0400] "GET /blog/wp-content/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 135.136.48.188 - - [16/Aug/2026:08:43:36 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:36 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:37 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 135.136.48.188 - - [16/Aug/2026:08:43:38 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 135.136.48.188 - - [16/Aug/2026:08:43:38 -0400] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:38 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 135.136.48.188 - - [16/Aug/2026:08:43:39 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 135.136.48.188 - - [16/Aug/2026:08:43:39 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:39 -0400] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 135.136.48.188 - - [16/Aug/2026:08:43:40 -0400] "GET /blog/wp-includes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 135.136.48.188 - - [16/Aug/2026:08:43:40 -0400] "GET /blog/wp-admin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 135.136.48.188 - - [16/Aug/2026:08:43:41 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 135.136.48.188 - - [16/Aug/2026:08:43:42 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:42 -0400] "GET /.bod/.ll/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 135.136.48.188 - - [16/Aug/2026:08:43:43 -0400] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 103.131.71.140 - - [16/Aug/2026:08:51:56 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.140 - - [16/Aug/2026:08:51:59 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [16/Aug/2026:09:19:56 -0400] "POST /wp-cron.php?doing_wp_cron=1786886396.2433989048004150390625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.133.221.163 - - [16/Aug/2026:09:19:55 -0400] "GET / HTTP/1.1" 200 - "https://m.baidu.com/s?word=www.car2012.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [16/Aug/2026:10:28:03 -0400] "POST /wp-cron.php?doing_wp_cron=1786890483.4481639862060546875000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 44.251.31.236 - - [16/Aug/2026:10:28:01 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/85.0.4183.0 Safari/537.36 Some Company. inc admin.contact@gmail.com" 147.224.242.137 - - [16/Aug/2026:10:29:44 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 147.224.242.137 - - [16/Aug/2026:10:29:45 -0400] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 20.65.69.59 - - [16/Aug/2026:10:59:08 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [16/Aug/2026:10:59:08 -0400] "POST /wp-cron.php?doing_wp_cron=1786892348.9032979011535644531250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.65.69.59 - - [16/Aug/2026:10:59:08 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:10 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 136455 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:11 -0400] "GET /akp.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:11 -0400] "GET /akp.php HTTP/1.1" 200 136411 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:12 -0400] "GET /jga.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:12 -0400] "GET /jga.php HTTP/1.1" 200 136411 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:13 -0400] "GET /f35.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:14 -0400] "GET /f35.php HTTP/1.1" 200 136411 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:14 -0400] "GET /xx.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:15 -0400] "GET /xx.php HTTP/1.1" 200 136409 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:15 -0400] "GET /w.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:16 -0400] "GET /w.php HTTP/1.1" 200 136407 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:16 -0400] "GET /webdb.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:17 -0400] "GET /webdb.php HTTP/1.1" 200 136415 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:17 -0400] "GET /new.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:17 -0400] "GET /new.php HTTP/1.1" 200 136411 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:18 -0400] "GET /data.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:18 -0400] "GET /data.php HTTP/1.1" 200 136413 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:19 -0400] "GET /Jcrop.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:19 -0400] "GET /Jcrop.php HTTP/1.1" 200 136415 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:20 -0400] "GET /inc.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:20 -0400] "GET /inc.php HTTP/1.1" 200 136411 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:21 -0400] "GET /click.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:21 -0400] "GET /click.php HTTP/1.1" 200 136415 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:22 -0400] "GET /av.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:22 -0400] "GET /av.php HTTP/1.1" 200 136409 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:22 -0400] "GET /ynz.PhP7 HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:23 -0400] "GET /ynz.PhP7 HTTP/1.1" 200 136413 "-" "-" 69.39.225.240 - - [16/Aug/2026:10:59:24 -0400] "POST /wp-cron.php?doing_wp_cron=1786892364.3955240249633789062500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.65.69.59 - - [16/Aug/2026:10:59:23 -0400] "GET /we2.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:24 -0400] "GET /we2.php HTTP/1.1" 200 136411 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:25 -0400] "GET /aa.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:25 -0400] "GET /aa.php HTTP/1.1" 200 136409 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:26 -0400] "GET /send.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:26 -0400] "GET /send.php HTTP/1.1" 200 136413 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:27 -0400] "GET /first.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:27 -0400] "GET /first.php HTTP/1.1" 200 136415 "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:27 -0400] "GET /core.php HTTP/1.1" 200 - "-" "-" 20.65.69.59 - - [16/Aug/2026:10:59:28 -0400] "GET /core.php HTTP/1.1" 200 136413 "-" "-" 193.123.73.95 - - [16/Aug/2026:11:10:05 -0400] "GET /file-manager/initialize HTTP/1.1" 200 28205 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 93.152.221.138 - - [16/Aug/2026:11:36:13 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:11:44:43 -0400] "POST /wp-cron.php?doing_wp_cron=1786895083.8987200260162353515625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 23.94.155.69 - - [16/Aug/2026:11:44:39 -0400] "GET / HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 69.39.225.240 - - [16/Aug/2026:11:46:58 -0400] "POST /wp-cron.php?doing_wp_cron=1786895218.8213660717010498046875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 54.212.187.227 - - [16/Aug/2026:11:46:58 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 43.133.60.94 - - [16/Aug/2026:11:48:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [16/Aug/2026:12:15:49 -0400] "POST /wp-cron.php?doing_wp_cron=1786896949.4777228832244873046875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 189.101.61.181 - - [16/Aug/2026:12:15:48 -0400] "GET http://www.lewaf.com/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:12:57:10 -0400] "POST /wp-cron.php?doing_wp_cron=1786899430.5746119022369384765625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 40.88.21.235 - - [16/Aug/2026:12:57:09 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [16/Aug/2026:13:01:23 -0400] "POST /wp-cron.php?doing_wp_cron=1786899683.8130569458007812500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [16/Aug/2026:13:01:23 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:13:02:44 -0400] "POST /wp-cron.php?doing_wp_cron=1786899764.0403230190277099609375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.130.131.18 - - [16/Aug/2026:13:02:43 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 216.244.66.237 - - [16/Aug/2026:13:15:14 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=c393ae5d85 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:13:48:19 -0400] "POST /wp-cron.php?doing_wp_cron=1786902499.4640209674835205078125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 18.236.138.231 - - [16/Aug/2026:13:48:18 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:14:03:10 -0400] "POST /wp-cron.php?doing_wp_cron=1786903390.2151310443878173828125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [16/Aug/2026:14:03:09 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 69.39.225.240 - - [16/Aug/2026:14:20:50 -0400] "POST /wp-cron.php?doing_wp_cron=1786904450.3628768920898437500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [16/Aug/2026:14:20:49 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 20.151.109.219 - - [16/Aug/2026:14:21:49 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [16/Aug/2026:14:21:50 -0400] "POST /wp-cron.php?doing_wp_cron=1786904510.1258289813995361328125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.151.109.219 - - [16/Aug/2026:14:21:49 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:21:57 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 136458 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:21:58 -0400] "GET /jga.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:21:58 -0400] "GET /jga.php HTTP/1.1" 200 136414 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:21:59 -0400] "GET /new.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:21:59 -0400] "GET /new.php HTTP/1.1" 200 136414 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:00 -0400] "GET /w.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:00 -0400] "GET /w.php HTTP/1.1" 200 136410 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:01 -0400] "GET /click.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:01 -0400] "GET /click.php HTTP/1.1" 200 136418 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:02 -0400] "GET /inc.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:02 -0400] "GET /inc.php HTTP/1.1" 200 136414 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:03 -0400] "GET /f35.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:03 -0400] "GET /f35.php HTTP/1.1" 200 136414 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:04 -0400] "GET /jj.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:04 -0400] "GET /jj.php HTTP/1.1" 200 136412 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:05 -0400] "GET /cmd.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:05 -0400] "GET /cmd.php HTTP/1.1" 200 136414 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:06 -0400] "GET /click.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:06 -0400] "GET /click.php HTTP/1.1" 200 136418 "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:06 -0400] "GET /aa.php HTTP/1.1" 200 - "-" "-" 20.151.109.219 - - [16/Aug/2026:14:22:07 -0400] "GET /aa.php HTTP/1.1" 200 136412 "-" "-" 69.39.225.240 - - [16/Aug/2026:14:23:56 -0400] "POST /wp-cron.php?doing_wp_cron=1786904636.8153500556945800781250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [16/Aug/2026:14:23:56 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 69.39.225.240 - - [16/Aug/2026:15:13:12 -0400] "POST /wp-cron.php?doing_wp_cron=1786907592.0377240180969238281250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 51.68.107.159 - - [16/Aug/2026:15:13:11 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.159 - - [16/Aug/2026:15:13:12 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.159 - - [16/Aug/2026:15:13:12 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.159 - - [16/Aug/2026:15:13:16 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [16/Aug/2026:15:17:16 -0400] "POST /wp-cron.php?doing_wp_cron=1786907836.2494690418243408203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.21 - - [16/Aug/2026:15:17:15 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.21 - - [16/Aug/2026:15:17:19 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [16/Aug/2026:15:20:07 -0400] "POST /wp-cron.php?doing_wp_cron=1786908007.1077859401702880859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 51.68.111.217 - - [16/Aug/2026:15:20:06 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.217 - - [16/Aug/2026:15:20:07 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.217 - - [16/Aug/2026:15:20:08 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.111.217 - - [16/Aug/2026:15:20:12 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [16/Aug/2026:15:25:20 -0400] "POST /wp-cron.php?doing_wp_cron=1786908320.4517760276794433593750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.225 - - [16/Aug/2026:15:25:19 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.225 - - [16/Aug/2026:15:25:22 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 216.244.66.237 - - [16/Aug/2026:16:40:01 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:16:53:18 -0400] "POST /wp-cron.php?doing_wp_cron=1786913598.1150391101837158203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [16/Aug/2026:16:53:17 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=afea54a684 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:17:01:08 -0400] "POST /wp-cron.php?doing_wp_cron=1786914068.8497319221496582031250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 66.249.70.172 - - [16/Aug/2026:17:01:08 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.173 - - [16/Aug/2026:17:01:14 -0400] "GET /ads.txt HTTP/1.1" 200 28166 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.173 - - [16/Aug/2026:17:22:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.186 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [16/Aug/2026:17:37:51 -0400] "POST /wp-cron.php?doing_wp_cron=1786916271.9633541107177734375000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.77.147.25 - - [16/Aug/2026:17:37:51 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 34.77.147.25 - - [16/Aug/2026:17:38:18 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:17:38:58 -0400] "POST /wp-cron.php?doing_wp_cron=1786916337.9957799911499023437500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.77.147.25 - - [16/Aug/2026:17:38:57 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:17:39:37 -0400] "POST /wp-cron.php?doing_wp_cron=1786916377.7232890129089355468750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.77.147.25 - - [16/Aug/2026:17:39:37 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:17:48:46 -0400] "POST /wp-cron.php?doing_wp_cron=1786916926.1517469882965087890625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 205.210.31.17 - - [16/Aug/2026:17:48:45 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 69.39.225.240 - - [16/Aug/2026:18:15:13 -0400] "POST /wp-cron.php?doing_wp_cron=1786918513.8418529033660888671875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.153.49.246 - - [16/Aug/2026:18:15:12 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:18:26:43 -0400] "POST /wp-cron.php?doing_wp_cron=1786919203.2096319198608398437500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 172.184.213.240 - - [16/Aug/2026:18:26:42 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:19:30:45 -0400] "POST /wp-cron.php?doing_wp_cron=1786923045.2355320453643798828125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 65.98.5.196 - - [16/Aug/2026:19:30:44 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 65.98.5.196 - - [16/Aug/2026:19:30:46 -0400] "GET /feed/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 65.98.5.196 - - [16/Aug/2026:19:30:47 -0400] "GET /feed/ HTTP/1.1" 200 8451 "http://LEWAF.COM/feed/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" 69.39.225.240 - - [16/Aug/2026:19:39:10 -0400] "POST /wp-cron.php?doing_wp_cron=1786923550.5420548915863037109375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.193.242.118 - - [16/Aug/2026:19:39:10 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 54.86.188.160 - - [16/Aug/2026:19:39:10 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [16/Aug/2026:19:48:40 -0400] "POST /wp-cron.php?doing_wp_cron=1786924120.4833700656890869140625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.157.158.178 - - [16/Aug/2026:19:48:39 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [16/Aug/2026:19:55:46 -0400] "POST /wp-cron.php?doing_wp_cron=1786924546.2454569339752197265625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 66.249.64.34 - - [16/Aug/2026:19:55:45 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.174 - - [16/Aug/2026:19:55:46 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.35 - - [16/Aug/2026:19:55:46 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.7871.186 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [16/Aug/2026:21:00:44 -0400] "POST /wp-cron.php?doing_wp_cron=1786928444.7616989612579345703125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.159.148.221 - - [16/Aug/2026:21:00:44 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [16/Aug/2026:21:01:25 -0400] "POST /wp-cron.php?doing_wp_cron=1786928485.8175649642944335937500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [16/Aug/2026:21:01:25 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:21:15:21 -0400] "POST /wp-cron.php?doing_wp_cron=1786929321.8480839729309082031250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [16/Aug/2026:21:15:20 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=c7b6430b26 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 54.236.1.232 - - [16/Aug/2026:21:40:09 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 54.236.1.165 - - [16/Aug/2026:21:40:10 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Pinterestbot/1.0; +http://www.pinterest.com/bot.html)" 69.39.225.240 - - [16/Aug/2026:21:45:20 -0400] "POST /wp-cron.php?doing_wp_cron=1786931120.4553680419921875000000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [16/Aug/2026:21:45:19 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:21:59:13 -0400] "POST /wp-cron.php?doing_wp_cron=1786931953.0737290382385253906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 38.107.232.23 - - [16/Aug/2026:21:59:12 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.107.232.23 - - [16/Aug/2026:21:59:14 -0400] "GET /wp-login.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.107.232.23 - - [16/Aug/2026:21:59:14 -0400] "GET /wp-admin/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.39.225.240 - - [16/Aug/2026:22:03:15 -0400] "POST /wp-cron.php?doing_wp_cron=1786932195.2533819675445556640625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [16/Aug/2026:22:03:14 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=53c0e28d30 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [16/Aug/2026:22:35:06 -0400] "POST /wp-cron.php?doing_wp_cron=1786934106.8656749725341796875000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.22 - - [16/Aug/2026:22:35:05 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.22 - - [16/Aug/2026:22:35:08 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.188 - - [16/Aug/2026:23:12:10 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.188 - - [16/Aug/2026:23:12:13 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [17/Aug/2026:00:02:05 -0400] "POST /wp-cron.php?doing_wp_cron=1786939325.2608480453491210937500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 66.249.64.33 - - [17/Aug/2026:00:02:04 -0400] "GET /ads.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.172 - - [17/Aug/2026:00:02:20 -0400] "GET /ads.txt HTTP/1.1" 200 28164 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [17/Aug/2026:00:24:06 -0400] "POST /wp-cron.php?doing_wp_cron=1786940646.4857239723205566406250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 172.235.33.63 - - [17/Aug/2026:00:24:05 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 172.235.33.63 - - [17/Aug/2026:00:24:25 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:02:10:13 -0400] "POST /wp-cron.php?doing_wp_cron=1786947013.2399809360504150390625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:02:10:12 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:02:23:15 -0400] "POST /wp-cron.php?doing_wp_cron=1786947795.4013750553131103515625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:02:23:14 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=b84035f1dc HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:02:27:41 -0400] "POST /wp-cron.php?doing_wp_cron=1786948061.5751030445098876953125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.130.16.212 - - [17/Aug/2026:02:27:40 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [17/Aug/2026:03:06:43 -0400] "POST /wp-cron.php?doing_wp_cron=1786950403.1238520145416259765625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.29 - - [17/Aug/2026:03:06:41 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 35.91.126.0 - - [17/Aug/2026:03:43:59 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:03:45:52 -0400] "POST /wp-cron.php?doing_wp_cron=1786952752.8145799636840820312500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.231.29.16 - - [17/Aug/2026:03:45:51 -0400] "GET / HTTP/1.1" 200 - "-" "curl/7.65.3" 69.39.225.240 - - [17/Aug/2026:03:53:20 -0400] "POST /wp-cron.php?doing_wp_cron=1786953200.7549829483032226562500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.154.161.153 - - [17/Aug/2026:03:53:19 -0400] "GET /ip HTTP/1.1" 200 136521 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 43.159.130.25 - - [17/Aug/2026:03:53:21 -0400] "GET /ip HTTP/1.1" 200 136520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 43.134.13.135 - - [17/Aug/2026:03:53:22 -0400] "GET /ip HTTP/1.1" 200 136520 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:04:17:07 -0400] "POST /wp-cron.php?doing_wp_cron=1786954627.9774019718170166015625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 114.119.137.7 - - [17/Aug/2026:04:17:07 -0400] "GET /robots.txt HTTP/1.1" 200 20 "http://lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 114.119.137.7 - - [17/Aug/2026:04:17:09 -0400] "GET /robots.txt HTTP/1.1" 200 171 "http://lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 69.39.225.240 - - [17/Aug/2026:04:23:49 -0400] "POST /wp-cron.php?doing_wp_cron=1786955029.1255478858947753906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 101.32.185.229 - - [17/Aug/2026:04:23:48 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:04:23:49 -0400] "POST /wp-cron.php?doing_wp_cron=1786955029.1254959106445312500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.134.2.134 - - [17/Aug/2026:04:23:48 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 43.153.60.140 - - [17/Aug/2026:04:23:50 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:04:46:29 -0400] "POST /wp-cron.php?doing_wp_cron=1786956389.1541020870208740234375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 157.173.122.176 - - [17/Aug/2026:04:46:28 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.114 Safari/537.36 Edg/91.0.864.54" 43.134.68.29 - - [17/Aug/2026:06:33:23 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 5.175.150.190 - - [17/Aug/2026:06:41:02 -0400] "GET http://www.lewaf.com/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 216.244.66.237 - - [17/Aug/2026:07:15:59 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 187.190.190.202 - - [17/Aug/2026:07:18:34 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 179.252.118.29 - - [17/Aug/2026:07:18:52 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:07:21:04 -0400] "POST /wp-cron.php?doing_wp_cron=1786965664.7058999538421630859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 85.208.98.18 - - [17/Aug/2026:07:21:04 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 69.39.225.240 - - [17/Aug/2026:07:25:27 -0400] "POST /wp-cron.php?doing_wp_cron=1786965927.8072690963745117187500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:07:25:27 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=ed615f8966 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.134.236.36 - - [17/Aug/2026:07:28:17 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 103.131.71.132 - - [17/Aug/2026:07:54:33 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.132 - - [17/Aug/2026:07:54:36 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [17/Aug/2026:09:32:18 -0400] "POST /wp-cron.php?doing_wp_cron=1786973538.6308948993682861328125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.33 - - [17/Aug/2026:09:32:18 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.33 - - [17/Aug/2026:09:32:20 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [17/Aug/2026:09:35:57 -0400] "POST /wp-cron.php?doing_wp_cron=1786973757.4043018817901611328125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 54.212.234.68 - - [17/Aug/2026:09:35:56 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:10:14:58 -0400] "POST /wp-cron.php?doing_wp_cron=1786976098.7433199882507324218750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:10:14:57 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:10:25:18 -0400] "POST /wp-cron.php?doing_wp_cron=1786976718.6460719108581542968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:10:25:17 -0400] "GET /portfolio-item/fruit-cake/feed/ HTTP/1.1" 200 752 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:10:30:17 -0400] "POST /wp-cron.php?doing_wp_cron=1786977017.9002079963684082031250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.24 - - [17/Aug/2026:10:30:16 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [17/Aug/2026:10:59:07 -0400] "POST /wp-cron.php?doing_wp_cron=1786978747.7509601116180419921875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:10:59:04 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:11:09:36 -0400] "POST /wp-cron.php?doing_wp_cron=1786979376.4926459789276123046875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:11:09:34 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=25c0e118af HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:11:22:30 -0400] "POST /wp-cron.php?doing_wp_cron=1786980150.3520219326019287109375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.157.158.178 - - [17/Aug/2026:11:22:28 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [17/Aug/2026:12:20:45 -0400] "POST /wp-cron.php?doing_wp_cron=1786983645.2467219829559326171875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 101.47.18.228 - - [17/Aug/2026:12:20:43 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:12:21:30 -0400] "POST /wp-cron.php?doing_wp_cron=1786983690.9655430316925048828125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.133.253.253 - - [17/Aug/2026:12:21:29 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [17/Aug/2026:12:31:22 -0400] "POST /wp-cron.php?doing_wp_cron=1786984282.1032240390777587890625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.157 - - [17/Aug/2026:12:31:20 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.157 - - [17/Aug/2026:12:31:23 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [17/Aug/2026:13:15:24 -0400] "POST /wp-cron.php?doing_wp_cron=1786986924.5197329521179199218750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 83.99.206.187 - - [17/Aug/2026:13:15:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 152.53.110.28 - - [17/Aug/2026:14:08:14 -0400] "GET /.well-known/security.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 152.53.110.28 - - [17/Aug/2026:14:08:16 -0400] "GET /.well-known/security.txt HTTP/1.1" 200 136560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 152.53.110.28 - - [17/Aug/2026:14:08:18 -0400] "GET /security.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 152.53.110.28 - - [17/Aug/2026:14:08:20 -0400] "GET /security.txt HTTP/1.1" 200 136536 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:14:30:28 -0400] "POST /wp-cron.php?doing_wp_cron=1786991428.0936760902404785156250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 54.224.96.227 - - [17/Aug/2026:14:30:26 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 54.147.150.116 - - [17/Aug/2026:14:30:28 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 195.62.50.50 - - [17/Aug/2026:14:38:05 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 173.252.82.67 - - [17/Aug/2026:14:47:20 -0400] "GET / HTTP/1.1" 200 - "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 173.252.95.31 - - [17/Aug/2026:14:47:21 -0400] "GET / HTTP/1.1" 200 20 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 69.63.184.24 - - [17/Aug/2026:14:47:26 -0400] "GET /?fbclid=IwcGRvZgRleHRuA2FlbQIxMQBzcnRjBmFwcF9pZAwyNTYyODEwNDA1NTgAAR6amKgpg4rmkj4k9ekAEYJUnkxGaWypPv73V4p6yWxLwlwsmETRceayxVoCvA_aem_8yvTMxhqWRzoildV8l3CWg HTTP/1.1" 200 20 "https://www.facebook.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36" 173.252.82.71 - - [17/Aug/2026:14:47:35 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 180.93.234.94 - - [17/Aug/2026:15:53:29 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5) AppleWeb Kit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" 180.93.234.94 - - [17/Aug/2026:15:53:31 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 28224 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_5) AppleWeb Kit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:17:01:10 -0400] "POST /wp-cron.php?doing_wp_cron=1787000470.5968079566955566406250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 172.234.232.181 - - [17/Aug/2026:17:01:09 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 10; vivo 1904) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.5938.60 Mobile Safari/537.36" 172.234.232.181 - - [17/Aug/2026:17:01:12 -0400] "HEAD /wp/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.234.232.181 - - [17/Aug/2026:17:01:13 -0400] "HEAD /wp/ HTTP/1.1" 200 - "http://lewaf.com/wp/" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.7 Mobile/15E148 Safari/604.1" 172.234.232.181 - - [17/Aug/2026:17:01:14 -0400] "HEAD /new/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.234.232.181 - - [17/Aug/2026:17:01:15 -0400] "HEAD /new/ HTTP/1.1" 200 - "http://lewaf.com/new/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 172.234.232.181 - - [17/Aug/2026:17:01:16 -0400] "HEAD /wordpress/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.234.232.181 - - [17/Aug/2026:17:01:17 -0400] "HEAD /wordpress/ HTTP/1.1" 200 - "http://lewaf.com/wordpress/" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 172.234.232.181 - - [17/Aug/2026:17:01:17 -0400] "HEAD /blog/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 172.234.232.181 - - [17/Aug/2026:17:01:18 -0400] "HEAD /blog/ HTTP/1.1" 200 - "http://lewaf.com/blog/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" 66.249.70.173 - - [17/Aug/2026:17:01:18 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.174 - - [17/Aug/2026:17:01:18 -0400] "GET /ads.txt HTTP/1.1" 200 28167 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.234.232.181 - - [17/Aug/2026:17:01:19 -0400] "HEAD /old/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.234.232.181 - - [17/Aug/2026:17:01:19 -0400] "HEAD /old/ HTTP/1.1" 200 - "http://lewaf.com/old/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:127.0) Gecko/20100101 Firefox/127.0" 172.234.232.181 - - [17/Aug/2026:17:01:20 -0400] "HEAD /backup/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 172.234.232.181 - - [17/Aug/2026:17:01:21 -0400] "HEAD /backup/ HTTP/1.1" 200 - "http://lewaf.com/backup/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/118.0.5993.90 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:17:09:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787000948.1800899505615234375000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 40.88.21.235 - - [17/Aug/2026:17:09:07 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [17/Aug/2026:17:11:36 -0400] "POST /wp-cron.php?doing_wp_cron=1787001096.0826179981231689453125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 176.61.146.236 - - [17/Aug/2026:17:11:35 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; RecScan/2.0)" 103.253.27.108 - - [17/Aug/2026:17:56:23 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 103.253.27.108 - - [17/Aug/2026:17:56:23 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 103.253.27.108 - - [17/Aug/2026:17:56:25 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 103.253.27.108 - - [17/Aug/2026:17:56:25 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 69.39.225.240 - - [17/Aug/2026:18:22:56 -0400] "POST /wp-cron.php?doing_wp_cron=1787005376.4892139434814453125000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 47.86.1.85 - - [17/Aug/2026:18:22:55 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:18:23:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787005412.0426731109619140625000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 176.61.146.236 - - [17/Aug/2026:18:23:31 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; RecScan/2.0)" 192.0.119.74 - - [17/Aug/2026:18:31:12 -0400] "GET /.well-known/hosting-provider HTTP/1.1" 200 28147 "http://www.lewaf.com/.well-known/hosting-provider" "WordPress.com; https://www.lewaf.com" 69.39.225.240 - - [17/Aug/2026:19:38:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787009888.2960848808288574218750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 35.187.31.229 - - [17/Aug/2026:19:38:07 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:19:54:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787010893.1066739559173583984375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:19:54:52 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:20:02:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787011325.0813589096069335937500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:20:02:03 -0400] "GET /portfolio-item/art-5/ HTTP/1.1" 200 151929 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:20:08:19 -0400] "POST /wp-cron.php?doing_wp_cron=1787011699.6130170822143554687500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:20:08:18 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=d5119ecad1 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 3.144.171.127 - - [17/Aug/2026:20:38:55 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7423.12 Safari/537.36" 3.144.171.127 - - [17/Aug/2026:20:39:03 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "python-requests/2.31.0" 3.144.171.127 - - [17/Aug/2026:20:39:04 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "python-requests/2.31.0" 69.39.225.240 - - [17/Aug/2026:20:39:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787013545.2566089630126953125000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 3.144.171.127 - - [17/Aug/2026:20:39:04 -0400] "GET /?add-to-cart=6137 HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7423.12 Safari/537.36" 3.144.171.127 - - [17/Aug/2026:20:39:07 -0400] "GET /?add-to-cart=6142 HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.7423.12 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:20:55:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787014553.5225150585174560546875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 170.106.65.93 - - [17/Aug/2026:20:55:52 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [17/Aug/2026:21:27:45 -0400] "POST /wp-cron.php?doing_wp_cron=1787016465.2601349353790283203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:21:27:44 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [17/Aug/2026:21:40:18 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=615220219e HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:21:48:15 -0400] "POST /wp-cron.php?doing_wp_cron=1787017695.2997970581054687500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 73.104.236.68 - - [17/Aug/2026:21:48:14 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:21:48:34 -0400] "POST /wp-cron.php?doing_wp_cron=1787017714.0722808837890625000000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 45.225.227.82 - - [17/Aug/2026:21:48:33 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 216.244.66.237 - - [17/Aug/2026:22:12:31 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:22:25:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787019938.2794649600982666015625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [17/Aug/2026:22:25:37 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=0ffb983bc6 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [17/Aug/2026:22:25:42 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=bc089eda24 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [17/Aug/2026:22:29:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787020140.0773129463195800781250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 100.24.39.240 - - [17/Aug/2026:22:28:59 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 100.24.39.240 - - [17/Aug/2026:22:29:00 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 69.39.225.240 - - [17/Aug/2026:22:34:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787020460.5582199096679687500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 193.235.141.157 - - [17/Aug/2026:22:34:19 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 145.220.91.19 - - [17/Aug/2026:22:34:20 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 40.88.21.235 - - [17/Aug/2026:23:13:49 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [17/Aug/2026:23:41:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787024484.6118149757385253906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.27 - - [17/Aug/2026:23:41:23 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.27 - - [17/Aug/2026:23:41:25 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 216.244.66.237 - - [17/Aug/2026:23:43:22 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [17/Aug/2026:23:50:14 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 66.249.64.34 - - [18/Aug/2026:00:01:13 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.174 - - [18/Aug/2026:00:01:14 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.64.34 - - [18/Aug/2026:00:01:18 -0400] "GET /ads.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.172 - - [18/Aug/2026:00:01:21 -0400] "GET /ads.txt HTTP/1.1" 200 28167 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [18/Aug/2026:00:45:47 -0400] "POST /wp-cron.php?doing_wp_cron=1787028347.6146190166473388671875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.235 - - [18/Aug/2026:00:45:47 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.235 - - [18/Aug/2026:00:45:49 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:00:50:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787028622.2694680690765380859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 145.220.91.19 - - [18/Aug/2026:00:50:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:122.0) Gecko/20100101 Firefox/122.0" 69.39.225.240 - - [18/Aug/2026:00:56:59 -0400] "POST /wp-cron.php?doing_wp_cron=1787029019.1132450103759765625000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 201.149.77.73 - - [18/Aug/2026:00:56:58 -0400] "GET http://www.lewaf.com/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 65.21.32.180 - - [18/Aug/2026:01:02:22 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; AffsignalCrawler/1.0; +https://affsignal.com/bot)" 52.202.232.123 - - [18/Aug/2026:01:16:26 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 216.244.66.237 - - [18/Aug/2026:01:18:37 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:01:27:20 -0400] "GET /portfolio-item/art-6/ HTTP/1.1" 200 151500 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.156.79.172 - - [18/Aug/2026:01:31:28 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.165.72.152 - - [18/Aug/2026:01:41:44 -0400] "GET /index.php?rest_route=/wp/v2/posts&per_page=10&_fields=id,comment_status,date&orderby=date&order=desc HTTP/1.1" 200 184 "http://lewaf.bronze-server.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.27.2 Safari/537.36" 69.165.72.152 - - [18/Aug/2026:01:41:46 -0400] "POST /wp-comments-post.php HTTP/1.1" 200 1118 "http://lewaf.bronze-server.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.64.89 Safari/537.36 Edg/119.0.64.89" 216.244.66.237 - - [18/Aug/2026:02:06:26 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:02:15:02 -0400] "GET /portfolio-item/art-5/feed/ HTTP/1.1" 200 743 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.165.186.188 - - [18/Aug/2026:02:26:54 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.191.45.212 - - [18/Aug/2026:02:39:55 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 216.244.66.237 - - [18/Aug/2026:02:53:00 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:03:06:56 -0400] "POST /wp-cron.php?doing_wp_cron=1787036816.9490680694580078125000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:03:06:54 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=f77f1d1fe0 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:03:07:03 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=99c889b717 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:03:07:10 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=63b4f74a2f HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:03:42:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787038973.4137101173400878906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.191.45.212 - - [18/Aug/2026:03:42:52 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 104.28.240.58 - - [18/Aug/2026:04:15:21 -0400] "GET /ms-themes.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 43.133.221.163 - - [18/Aug/2026:04:20:54 -0400] "GET /tel:5305810600 HTTP/1.1" 200 - "http://zyakj.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [18/Aug/2026:04:20:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787041255.8001990318298339843750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.133.221.163 - - [18/Aug/2026:04:20:54 -0400] "GET /mailto:infolewaf.com HTTP/1.1" 200 - "https://m.baidu.com/s?word=www.acdr.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 43.133.221.163 - - [18/Aug/2026:04:20:54 -0400] "GET /?add-to-cart=6142 HTTP/1.1" 200 - "http://www.meago.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 43.133.221.163 - - [18/Aug/2026:04:20:54 -0400] "GET /?add-to-cart=6137 HTTP/1.1" 200 - "http://www.mzis.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 43.133.221.163 - - [18/Aug/2026:04:20:54 -0400] "GET / HTTP/1.1" 200 - "http://ywpkj.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 43.133.221.163 - - [18/Aug/2026:04:20:56 -0400] "GET /tel:5305810600 HTTP/1.1" 200 136604 "http://zyakj.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 43.133.221.163 - - [18/Aug/2026:04:20:56 -0400] "GET /mailto:infolewaf.com HTTP/1.1" 200 136662 "https://m.baidu.com/s?word=www.acdr.cn" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [18/Aug/2026:04:26:31 -0400] "POST /wp-cron.php?doing_wp_cron=1787041591.5030460357666015625000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.23 - - [18/Aug/2026:04:26:30 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:04:27:31 -0400] "POST /wp-cron.php?doing_wp_cron=1787041650.9990150928497314453125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:04:27:30 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:04:39:50 -0400] "POST /wp-cron.php?doing_wp_cron=1787042390.8542261123657226562500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:04:39:49 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=a0040cd104 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 192.71.46.30 - - [18/Aug/2026:04:48:43 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.3.1 Mobile/15E148 Safari/604" 69.39.225.240 - - [18/Aug/2026:04:59:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787043580.7748720645904541015625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 155.2.194.21 - - [18/Aug/2026:04:59:40 -0400] "GET /.git/config HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 155.2.194.21 - - [18/Aug/2026:04:59:41 -0400] "GET /.git/config HTTP/1.1" 200 28136 "http://lewaf.com/.git/config" "Go-http-client/1.1" 69.39.225.240 - - [18/Aug/2026:05:11:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787044268.5392909049987792968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 35.95.29.114 - - [18/Aug/2026:05:11:07 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:05:49:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787046572.2208280563354492187500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 146.190.161.161 - - [18/Aug/2026:05:49:31 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:05:59:37 -0400] "POST /wp-cron.php?doing_wp_cron=1787047177.9171481132507324218750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 104.37.185.7 - - [18/Aug/2026:05:59:37 -0400] "GET /robots.txt HTTP/1.0" 200 316 "-" "Mozilla/5.0 (compatible; heritrix/3.14.2-SNAPSHOT-2026-04-13T06:21:22Z +https://www.image-meta.com)" 104.37.185.7 - - [18/Aug/2026:05:59:38 -0400] "GET / HTTP/1.0" 200 - "-" "Mozilla/5.0 (compatible; heritrix/3.14.2-SNAPSHOT-2026-04-13T06:21:22Z +https://www.image-meta.com)" 69.39.225.240 - - [18/Aug/2026:06:12:35 -0400] "POST /wp-cron.php?doing_wp_cron=1787047955.0448079109191894531250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.77.106.196 - - [18/Aug/2026:06:12:34 -0400] "GET /sftp-config.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.106.196 - - [18/Aug/2026:06:12:36 -0400] "GET /sftp-config.json HTTP/1.1" 200 28188 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.106.196 - - [18/Aug/2026:06:12:37 -0400] "GET /.vscode/sftp.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.77.106.196 - - [18/Aug/2026:06:12:38 -0400] "GET /.vscode/sftp.json HTTP/1.1" 200 28189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 69.39.225.240 - - [18/Aug/2026:06:15:54 -0400] "POST /wp-cron.php?doing_wp_cron=1787048154.3133270740509033203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.130.91.75 - - [18/Aug/2026:06:15:53 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:06:20:14 -0400] "POST /wp-cron.php?doing_wp_cron=1787048414.0241100788116455078125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.175 - - [18/Aug/2026:06:20:13 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.175 - - [18/Aug/2026:06:20:15 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:06:26:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787048790.0097560882568359375000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.166.131.228 - - [18/Aug/2026:06:26:29 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [18/Aug/2026:06:33:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787049218.9085090160369873046875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [18/Aug/2026:06:33:35 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 216.244.66.237 - - [18/Aug/2026:06:46:56 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:07:01:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787050892.0986289978027343750000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:07:01:30 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=41792a304c HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:07:01:36 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=d1b9af9c3a HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:07:12:10 -0400] "POST /wp-cron.php?doing_wp_cron=1787051530.7301309108734130859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 52.26.161.71 - - [18/Aug/2026:07:12:09 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:07:16:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787051766.7970249652862548828125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.65.236.108 - - [18/Aug/2026:07:16:05 -0400] "GET /sftp-config.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.108 - - [18/Aug/2026:07:16:08 -0400] "GET /sftp-config.json HTTP/1.1" 200 28186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.108 - - [18/Aug/2026:07:16:09 -0400] "GET /.vscode/sftp.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.108 - - [18/Aug/2026:07:16:13 -0400] "GET /.vscode/sftp.json HTTP/1.1" 200 28189 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 69.39.225.240 - - [18/Aug/2026:07:33:36 -0400] "POST /wp-cron.php?doing_wp_cron=1787052816.6637890338897705078125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:07:33:35 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:07:47:58 -0400] "POST /wp-cron.php?doing_wp_cron=1787053678.0980648994445800781250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:07:47:57 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=750d358b98 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:07:48:02 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=8559ffbae8 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 168.62.48.100 - - [18/Aug/2026:08:16:49 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [18/Aug/2026:08:16:50 -0400] "POST /wp-cron.php?doing_wp_cron=1787055410.1014070510864257812500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 168.62.48.100 - - [18/Aug/2026:08:16:49 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:50 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 136457 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:51 -0400] "GET /weozh.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:51 -0400] "GET /weozh.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:52 -0400] "GET /rymmm.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:52 -0400] "GET /rymmm.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:53 -0400] "GET /lddxs.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:53 -0400] "GET /lddxs.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:54 -0400] "GET /zjggu.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:55 -0400] "GET /zjggu.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:55 -0400] "GET /dlvqo.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:55 -0400] "GET /dlvqo.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:56 -0400] "GET /pkmoj.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:57 -0400] "GET /pkmoj.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:57 -0400] "GET /kopyw.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:58 -0400] "GET /kopyw.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:58 -0400] "GET /zznmg.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:59 -0400] "GET /zznmg.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:16:59 -0400] "GET /bhfnd.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:00 -0400] "GET /bhfnd.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:00 -0400] "GET /qfvqu.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:01 -0400] "GET /qfvqu.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:01 -0400] "GET /oivcl.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:02 -0400] "GET /oivcl.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:02 -0400] "GET /zugvi.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:03 -0400] "GET /zugvi.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:04 -0400] "GET /wsrer.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:04 -0400] "GET /wsrer.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:05 -0400] "GET /ucpfr.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:05 -0400] "GET /ucpfr.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:06 -0400] "GET /yxijx.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:07 -0400] "GET /yxijx.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:07 -0400] "GET /zwlsv.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:08 -0400] "GET /zwlsv.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:08 -0400] "GET /jrpga.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:09 -0400] "GET /jrpga.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:09 -0400] "GET /museu/yhweq.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:10 -0400] "GET /museu/yhweq.php HTTP/1.1" 200 136429 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:10 -0400] "GET /nwwha.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:11 -0400] "GET /nwwha.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:11 -0400] "GET /opsqt.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:12 -0400] "GET /opsqt.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:12 -0400] "GET /jvcpa.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:14 -0400] "GET /jvcpa.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:15 -0400] "GET /wp-includes/block-supports/input.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:15 -0400] "GET /wp-includes/wp-conflg.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:15 -0400] "GET /wp-includes/Requests/library/a1cord.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:15 -0400] "GET /wp-includes/images/wp/snXZcWW.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:15 -0400] "GET /assets/admin/login/info.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:15 -0400] "GET /assets/admin/login/info.php HTTP/1.1" 200 136453 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:16 -0400] "GET /wp-includes/theme-previews-exception.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:16 -0400] "GET /images/menu/2025/04/aa97abcd1241bfd851db3d662a4f2b62e.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:18 -0400] "GET /images/menu/2025/04/aa97abcd1241bfd851db3d662a4f2b62e.php HTTP/1.1" 200 136513 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:19 -0400] "GET /wp-includes/fazemrx1949_l7oIHvFs.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:19 -0400] "GET /assets/filemanager/dialog.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:19 -0400] "GET /assets/filemanager/dialog.php HTTP/1.1" 200 136457 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:20 -0400] "GET /assets/font/bootstrap-icon/shell.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [18/Aug/2026:08:17:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787055444.1236929893493652343750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 168.62.48.100 - - [18/Aug/2026:08:17:23 -0400] "GET /assets/font/bootstrap-icon/shell.php HTTP/1.1" 200 136471 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /.well-known/acme-challenge/local-access.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/php-compat/Olu2RK.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/assets/wow.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/wp_y13h6oGI.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/css/Lgt1ghftfgbaas.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/rest-api/menu.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/customize/5dCx2y.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/bK9rpN.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /wp-includes/IXR/options.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:27 -0400] "GET /images/slide/2025/09/op4.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:28 -0400] "GET /images/slide/2025/09/op4.php HTTP/1.1" 200 136455 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:29 -0400] "GET /wp-includes/class-wp-theme-json-schema-variable.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:29 -0400] "GET /wp-includes/css/nDJvnf.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:29 -0400] "GET /wp-includes/pomo/mail.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:29 -0400] "GET /wp-admin/includes/ms-repository.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-admin/includes/ms-repository.php HTTP/1.1" 200 136469 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/sodium_compat/rd64D5.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/assets/lXppkm.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/html-api/wp-load.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/sitemaps/about.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/images/wp-load.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/theme-compat/82NtBt.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/block-bindings/UpeDL0.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/html-api/QxXX0h.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/Text/r51tv7.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/images/JpIAZA.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/block-bindings/kXaPL5.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/PHPMailer/8bmaeS.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /wp-includes/block-patterns/mkA9wN.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:32 -0400] "GET /rezor.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:33 -0400] "GET /rezor.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:33 -0400] "GET /uploads/bypass.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:34 -0400] "GET /uploads/bypass.php HTTP/1.1" 200 136435 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:34 -0400] "GET /wp-admin/includes/3p8jj8r.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:35 -0400] "GET /wp-admin/includes/3p8jj8r.php HTTP/1.1" 200 136457 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:36 -0400] "GET //index/function.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:36 -0400] "GET /index/function.php HTTP/1.1" 200 136435 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:37 -0400] "GET /wp-includes/Requests/library/upload.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:37 -0400] "GET /Cachex.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:37 -0400] "GET /Cachex.php HTTP/1.1" 200 136419 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:38 -0400] "GET /Menu/fonts/%20backup/log/index/js/wpup.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:38 -0400] "GET /Menu/fonts/%20backup/log/index/js/wpup.php HTTP/1.1" 200 136477 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:39 -0400] "GET /wp-2019.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:39 -0400] "GET /wp-2019.php HTTP/1.1" 200 136421 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:40 -0400] "GET /wp-includes/blocks/social-link/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:40 -0400] "GET //.cache/x.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:40 -0400] "GET /.cache/x.php HTTP/1.1" 200 136423 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:41 -0400] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:41 -0400] "GET /wp-content/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:41 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:41 -0400] "GET /wp-includes/blocks/pullquote/windex.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:41 -0400] "GET /help/crnpwfiu.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:41 -0400] "GET /help/crnpwfiu.php HTTP/1.1" 200 136433 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:42 -0400] "GET /wp-content/plugins/majapahitslot/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:42 -0400] "GET /wp-includes/blocks/post-date/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:42 -0400] "GET /wp-includes/blocks/navigation-submenu/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:42 -0400] "GET /wp-includes/css/dist/block-directory/upload.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:42 -0400] "GET /update/wpupex.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:42 -0400] "GET /update/wpupex.php HTTP/1.1" 200 136433 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:43 -0400] "GET /wp-admin/install.php HTTP/1.1" 200 17008 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:43 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:43 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:44 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:44 -0400] "GET //wp-includes/certificates/upload.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:45 -0400] "GET /well-known/index.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:45 -0400] "GET /well-known/ HTTP/1.1" 200 136421 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:46 -0400] "GET /wp-includes/Ipv6.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:46 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:46 -0400] "GET /wp-admin/js/ HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:46 -0400] "GET /assets/plugins/gmap/dapa.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:46 -0400] "GET /assets/plugins/gmap/dapa.php HTTP/1.1" 200 136455 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:47 -0400] "GET /mt/byp.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:47 -0400] "GET /mt/byp.php HTTP/1.1" 200 136419 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:48 -0400] "GET /MTOS/byp.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:48 -0400] "GET /MTOS/byp.php HTTP/1.1" 200 136423 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:49 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:49 -0400] "GET /wp-content/themes/home/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:49 -0400] "GET /modules/ets_whatsapp/security.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:50 -0400] "GET /modules/ets_whatsapp/security.php HTTP/1.1" 200 136465 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:50 -0400] "GET /wp-includes/Text/Diff/Engine/upload.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:50 -0400] "GET /wordpress/wp-content/plugins/cvqvgfk/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:50 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [18/Aug/2026:08:17:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787055471.4333350658416748046875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 168.62.48.100 - - [18/Aug/2026:08:17:50 -0400] "GET /first.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:51 -0400] "GET /first.php HTTP/1.1" 200 136417 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:52 -0400] "GET /wp-includes/js/crop/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:52 -0400] "GET /wp-includes/theme-compat/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:52 -0400] "GET /wp-includes/blocks/shortcode/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:52 -0400] "GET /blog/byp.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:52 -0400] "GET /blog/byp.php HTTP/1.1" 200 136423 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:53 -0400] "GET /wp-includes/blocks/file/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:53 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:53 -0400] "GET //images/security.php HTTP/1.1" 200 - "-" "-" 168.62.48.100 - - [18/Aug/2026:08:17:53 -0400] "GET /images/security.php HTTP/1.1" 200 136437 "-" "-" 44.195.188.79 - - [18/Aug/2026:08:32:05 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 44.195.188.79 - - [18/Aug/2026:08:32:06 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [18/Aug/2026:08:43:10 -0400] "POST /wp-cron.php?doing_wp_cron=1787056990.0567750930786132812500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 82.108.212.9 - - [18/Aug/2026:08:43:08 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 18.222.7.216 - - [18/Aug/2026:09:33:10 -0400] "GET / HTTP/1.1" 200 20 "-" "Apache-HttpClient/4.5.14 (Java/21.0.12)" 69.39.225.240 - - [18/Aug/2026:09:33:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787060035.2822840213775634765625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 51.68.107.151 - - [18/Aug/2026:09:33:54 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.151 - - [18/Aug/2026:09:33:55 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.151 - - [18/Aug/2026:09:33:56 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.151 - - [18/Aug/2026:09:34:03 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [18/Aug/2026:09:51:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787061111.6759970188140869140625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:09:51:51 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:10:05:46 -0400] "POST /wp-cron.php?doing_wp_cron=1787061946.7446510791778564453125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:10:05:44 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=785f127fdd HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:10:38:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787063880.2353639602661132812500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:10:37:37 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:10:41:07 -0400] "POST /wp-cron.php?doing_wp_cron=1787064067.0603868961334228515625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.26 - - [18/Aug/2026:10:41:04 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.26 - - [18/Aug/2026:10:41:08 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:10:59:19 -0400] "POST /wp-cron.php?doing_wp_cron=1787065159.9877231121063232421875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 136.243.228.195 - - [18/Aug/2026:10:59:16 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 136.243.228.198 - - [18/Aug/2026:10:59:20 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 69.39.225.240 - - [18/Aug/2026:10:59:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787065165.0771539211273193359375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 136.243.228.195 - - [18/Aug/2026:10:59:22 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 136.243.228.198 - - [18/Aug/2026:10:59:25 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 205.210.31.164 - - [18/Aug/2026:11:00:58 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 69.39.225.240 - - [18/Aug/2026:11:14:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787066066.8549530506134033203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.166.244.251 - - [18/Aug/2026:11:14:24 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [18/Aug/2026:11:23:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787066585.7601680755615234375000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:11:23:03 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:11:31:48 -0400] "GET /wp-content/uploads/2021/09/batter-5.png HTTP/1.1" 200 1123381 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:11:36:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787067384.6446349620819091796875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:11:36:22 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=e65620b03d HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 157.90.95.245 - - [18/Aug/2026:12:07:06 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 28212 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 157.90.95.245 - - [18/Aug/2026:12:07:09 -0400] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:12:08:54 -0400] "POST /wp-cron.php?doing_wp_cron=1787069334.0943229198455810546875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.134.163.229 - - [18/Aug/2026:12:08:51 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [18/Aug/2026:12:15:11 -0400] "POST /wp-cron.php?doing_wp_cron=1787069711.4246399402618408203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.25 - - [18/Aug/2026:12:15:07 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:12:17:57 -0400] "POST /wp-cron.php?doing_wp_cron=1787069877.7168109416961669921875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 47.243.218.50 - - [18/Aug/2026:12:17:55 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:12:36:56 -0400] "POST /wp-cron.php?doing_wp_cron=1787071016.1309349536895751953125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 198.235.24.137 - - [18/Aug/2026:12:36:53 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 69.39.225.240 - - [18/Aug/2026:12:40:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787071230.0308239459991455078125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 38.107.232.45 - - [18/Aug/2026:12:40:28 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.107.232.45 - - [18/Aug/2026:12:40:33 -0400] "GET /wp-login.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 38.107.232.45 - - [18/Aug/2026:12:40:35 -0400] "GET /wp-admin/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:12:54:44 -0400] "POST /wp-cron.php?doing_wp_cron=1787072084.1310338973999023437500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:12:54:41 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:13:06:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787072798.1380200386047363281250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:13:06:35 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=bb69990dda HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:13:25:02 -0400] "POST /wp-cron.php?doing_wp_cron=1787073902.0145070552825927734375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.84 - - [18/Aug/2026:13:24:59 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.84 - - [18/Aug/2026:13:25:03 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:13:39:23 -0400] "POST /wp-cron.php?doing_wp_cron=1787074763.8807480335235595703125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:13:39:21 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:13:53:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787075586.7064650058746337890625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:13:53:04 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=d5bf0d2846 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:14:46:59 -0400] "POST /wp-cron.php?doing_wp_cron=1787078819.8260331153869628906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 136.243.228.195 - - [18/Aug/2026:14:46:57 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; DataForSeoBot/1.0; +https://dataforseo.com/dataforseo-bot)" 193.181.13.96 - - [18/Aug/2026:15:20:41 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 5.133.195.100 - - [18/Aug/2026:15:20:43 -0400] "GET /robots.txt HTTP/1.1" 200 171 "http://lewaf.com/robots.txt" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 185.12.148.27 - - [18/Aug/2026:15:20:45 -0400] "GET /llms.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 93.158.109.86 - - [18/Aug/2026:15:20:47 -0400] "GET /llms.txt HTTP/1.1" 200 28185 "http://lewaf.com/llms.txt" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 151.252.29.222 - - [18/Aug/2026:15:20:50 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Android 14; Mobile; rv:123.0) Gecko/123.0 Firefox/123" 69.39.225.240 - - [18/Aug/2026:16:39:49 -0400] "POST /wp-cron.php?doing_wp_cron=1787085589.1799850463867187500000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 66.249.70.174 - - [18/Aug/2026:16:39:46 -0400] "GET /ads.txt HTTP/1.1" 200 28166 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 216.244.66.237 - - [18/Aug/2026:16:41:12 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 47.205.167.160 - - [18/Aug/2026:16:49:46 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:16:54:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787086495.5270230770111083984375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:16:54:53 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=2b93ff941d HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [18/Aug/2026:16:56:24 -0400] "GET /wp-content/uploads/2021/09/batter-2.png HTTP/1.1" 200 713474 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:17:27:42 -0400] "POST /wp-cron.php?doing_wp_cron=1787088462.3654170036315917968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:17:27:40 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 96.255.218.209 - - [18/Aug/2026:17:40:03 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:17:40:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787089224.3446159362792968750000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [18/Aug/2026:17:40:22 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=443bdd3bae HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [18/Aug/2026:18:01:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787090460.3063600063323974609375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 45.11.172.239 - - [18/Aug/2026:18:00:58 -0400] "GET /.git/config HTTP/1.1" 200 28132 "-" "Go-http-client/1.1" 69.39.225.240 - - [18/Aug/2026:18:17:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787091460.3853480815887451171875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.167.174.74 - - [18/Aug/2026:18:17:38 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:18:30:31 -0400] "POST /wp-cron.php?doing_wp_cron=1787092231.8424661159515380859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 192.178.4.100 - - [18/Aug/2026:18:30:29 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [18/Aug/2026:19:17:57 -0400] "POST /wp-cron.php?doing_wp_cron=1787095077.4215850830078125000000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.223 - - [18/Aug/2026:19:17:55 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.223 - - [18/Aug/2026:19:17:58 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 3.93.128.70 - - [18/Aug/2026:19:22:11 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [18/Aug/2026:19:30:35 -0400] "POST /wp-cron.php?doing_wp_cron=1787095835.8187780380249023437500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.24 - - [18/Aug/2026:19:30:33 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.24 - - [18/Aug/2026:19:30:37 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [18/Aug/2026:20:14:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787098480.8975110054016113281250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 66.249.70.173 - - [18/Aug/2026:20:14:38 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.174 - - [18/Aug/2026:20:14:41 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.137 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [18/Aug/2026:20:18:28 -0400] "POST /wp-cron.php?doing_wp_cron=1787098708.7893760204315185546875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 101.32.208.70 - - [18/Aug/2026:20:18:26 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [18/Aug/2026:20:37:34 -0400] "POST /wp-cron.php?doing_wp_cron=1787099854.8324069976806640625000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 40.88.21.235 - - [18/Aug/2026:20:37:32 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [18/Aug/2026:21:26:47 -0400] "POST /wp-cron.php?doing_wp_cron=1787102807.6052350997924804687500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 52.24.1.114 - - [18/Aug/2026:21:26:44 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:21:42:44 -0400] "POST /wp-cron.php?doing_wp_cron=1787103764.5017480850219726562500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 35.205.123.189 - - [18/Aug/2026:21:42:42 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [18/Aug/2026:22:42:28 -0400] "POST /wp-cron.php?doing_wp_cron=1787107348.7464900016784667968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.74.242.206 - - [18/Aug/2026:22:42:24 -0400] "GET /robots.txt HTTP/1.0" 200 20 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 34.74.242.206 - - [18/Aug/2026:22:42:29 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 34.74.242.206 - - [18/Aug/2026:22:42:31 -0400] "GET / HTTP/1.0" 200 20 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 69.39.225.240 - - [18/Aug/2026:22:58:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787108302.2365200519561767578125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.74.242.206 - - [18/Aug/2026:22:58:20 -0400] "GET /robots.txt HTTP/1.0" 200 171 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 34.74.242.206 - - [18/Aug/2026:22:58:22 -0400] "GET / HTTP/1.0" 200 20 "-" "ZoominfoBot (zoominfobot at zoominfo dot com)" 69.39.225.240 - - [18/Aug/2026:23:16:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787109400.2556059360504150390625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 168.107.94.195 - - [18/Aug/2026:23:16:38 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) Gecko/20100101 Firefox/120.0.1" 185.223.152.216 - - [18/Aug/2026:23:26:24 -0400] "GET /favicon.ico HTTP/1.1" 200 20 "-" "NetworkingExtension/8624.4.5.10.5 Network/5812.160.9 iOS/26.6" 185.223.152.204 - - [18/Aug/2026:23:26:24 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0" 69.39.225.240 - - [18/Aug/2026:23:26:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787109986.1129510402679443359375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 185.223.152.7 - - [18/Aug/2026:23:26:24 -0400] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 200 28184 "-" "NetworkingExtension/8624.4.5.10.5 Network/5812.160.9 iOS/26.6" 185.223.152.227 - - [18/Aug/2026:23:26:24 -0400] "GET /apple-touch-icon.png HTTP/1.1" 200 28177 "-" "NetworkingExtension/8624.4.5.10.5 Network/5812.160.9 iOS/26.6" 69.39.225.240 - - [19/Aug/2026:00:13:14 -0400] "POST /wp-cron.php?doing_wp_cron=1787112794.2703719139099121093750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 114.119.140.250 - - [19/Aug/2026:00:13:12 -0400] "GET /robots.txt HTTP/1.1" 200 20 "http://lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 114.119.140.250 - - [19/Aug/2026:00:13:15 -0400] "GET /robots.txt HTTP/1.1" 200 171 "http://lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 69.39.225.240 - - [19/Aug/2026:00:17:46 -0400] "POST /wp-cron.php?doing_wp_cron=1787113066.3359858989715576171875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 192.178.4.100 - - [19/Aug/2026:00:17:43 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.174 - - [19/Aug/2026:00:17:46 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [19/Aug/2026:00:17:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787113072.2964780330657958984375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 192.178.4.99 - - [19/Aug/2026:00:17:50 -0400] "GET /ads.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.173 - - [19/Aug/2026:00:17:54 -0400] "GET /ads.txt HTTP/1.1" 200 28169 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [19/Aug/2026:00:23:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787113410.0109019279479980468750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.20 - - [19/Aug/2026:00:23:28 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [19/Aug/2026:00:37:18 -0400] "POST /wp-cron.php?doing_wp_cron=1787114238.1450569629669189453125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.153.119.119 - - [19/Aug/2026:00:37:16 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [19/Aug/2026:01:07:07 -0400] "POST /wp-cron.php?doing_wp_cron=1787116027.7698910236358642578125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 114.119.137.180 - - [19/Aug/2026:01:07:05 -0400] "GET / HTTP/1.1" 200 20 "http://www.lewaf.com/" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 69.39.225.240 - - [19/Aug/2026:01:12:16 -0400] "POST /wp-cron.php?doing_wp_cron=1787116336.8858909606933593750000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 51.68.236.72 - - [19/Aug/2026:01:12:13 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.72 - - [19/Aug/2026:01:12:17 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.72 - - [19/Aug/2026:01:12:20 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.72 - - [19/Aug/2026:01:12:31 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [19/Aug/2026:01:17:45 -0400] "POST /wp-cron.php?doing_wp_cron=1787116665.6835579872131347656250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.204.209.169 - - [19/Aug/2026:01:17:43 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/111.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:01:22:36 -0400] "POST /wp-cron.php?doing_wp_cron=1787116956.7621939182281494140625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 50.18.8.240 - - [19/Aug/2026:01:22:34 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "TerraCotta 0.2 https://www.github.com/ceramicTeam/CeramicTerracotta" 69.39.225.240 - - [19/Aug/2026:01:41:03 -0400] "POST /wp-cron.php?doing_wp_cron=1787118063.3758020401000976562500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 82.108.212.9 - - [19/Aug/2026:01:41:01 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:03:21:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787124111.3439679145812988281250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.195.16.23 - - [19/Aug/2026:03:21:47 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 34.195.16.23 - - [19/Aug/2026:03:21:51 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 146.70.165.106 - - [19/Aug/2026:03:48:12 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:03:55:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787126152.2622289657592773437500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 198.235.24.178 - - [19/Aug/2026:03:55:49 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 69.39.225.240 - - [19/Aug/2026:04:10:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787127020.1887159347534179687500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 44.254.76.240 - - [19/Aug/2026:04:10:17 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:04:52:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787129545.8478729724884033203125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 35.245.99.155 - - [19/Aug/2026:04:52:23 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.0 Safari/605.1.15" 69.39.225.240 - - [19/Aug/2026:05:10:42 -0400] "POST /wp-cron.php?doing_wp_cron=1787130642.4682109355926513671875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.191.45.212 - - [19/Aug/2026:05:10:24 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 20.191.45.212 - - [19/Aug/2026:05:10:30 -0400] "GET /favicon.ico HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 65.21.32.180 - - [19/Aug/2026:05:21:49 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; AffsignalCrawler/1.0; +https://affsignal.com/bot)" 69.39.225.240 - - [19/Aug/2026:05:36:16 -0400] "POST /wp-cron.php?doing_wp_cron=1787132176.4900660514831542968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [19/Aug/2026:05:36:10 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 69.39.225.240 - - [19/Aug/2026:05:41:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787132468.8067519664764404296875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.59 - - [19/Aug/2026:05:41:06 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.59 - - [19/Aug/2026:05:41:10 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [19/Aug/2026:05:42:33 -0400] "POST /wp-cron.php?doing_wp_cron=1787132553.5045740604400634765625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.157.158.178 - - [19/Aug/2026:05:42:31 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [19/Aug/2026:06:41:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787136066.0057768821716308593750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.165.186.188 - - [19/Aug/2026:06:40:59 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 34.148.153.217 - - [19/Aug/2026:07:54:28 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:08:01:41 -0400] "POST /wp-cron.php?doing_wp_cron=1787140901.9891190528869628906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 50.3.222.159 - - [19/Aug/2026:08:01:38 -0400] "GET /wp-login.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" 34.148.153.217 - - [19/Aug/2026:08:07:55 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:18:54 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:08:29:47 -0400] "POST /wp-cron.php?doing_wp_cron=1787142587.6813631057739257812500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [19/Aug/2026:08:29:43 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.148.153.217 - - [19/Aug/2026:08:30:09 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:19 -0400] "GET /z9x8c7v6b5-debug-trigger-lewaf.com HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 69.39.225.240 - - [19/Aug/2026:08:30:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787142626.9631400108337402343750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /.env HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /.env.example HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /rclone.conf HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /dist/manifest.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /.github/workflows/deploy.yml HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /dist/.vite/manifest.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /.vite/manifest.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:20 -0400] "GET /wp-json HTTP/1.1" 200 90112 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:21 -0400] "GET /build/manifest.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:28 -0400] "GET /z9x8c7v6b5-debug-trigger-lewaf.com HTTP/1.1" 200 28224 "http://lewaf.com/z9x8c7v6b5-debug-trigger-lewaf.com" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:30 -0400] "GET /.env HTTP/1.1" 200 28210 "http://lewaf.com/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:30 -0400] "GET /.env.local HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:30 -0400] "GET /.env.production HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:30 -0400] "GET /.env.backup HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:31 -0400] "GET /.env.example HTTP/1.1" 200 28216 "http://lewaf.com/.env.example" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.148.153.217 - - [19/Aug/2026:08:30:31 -0400] "GET /dist/manifest.json HTTP/1.1" 200 28219 "http://lewaf.com/dist/manifest.json" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:32 -0400] "POST /graphql HTTP/1.1" 200 28212 "http://lewaf.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:38 -0400] "GET /?add-to-cart=6137 HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:42 -0400] "POST /api/graphql HTTP/1.1" 200 28218 "http://lewaf.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:48 -0400] "GET /?add-to-cart=6142 HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.148.153.217 - - [19/Aug/2026:08:30:53 -0400] "POST /v1/graphql HTTP/1.1" 200 28214 "http://lewaf.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:08:45:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787143531.9680540561676025390625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [19/Aug/2026:08:45:25 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=48ea6fe798 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [19/Aug/2026:08:46:02 -0400] "GET /cart/?remove_item=7ef655920211ac9502bf69d5a65bb941&_wpnonce=92f7a8b363 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 34.148.153.217 - - [19/Aug/2026:08:52:23 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 34.139.206.249 - - [19/Aug/2026:09:00:20 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:09:03:43 -0400] "POST /wp-cron.php?doing_wp_cron=1787144623.2141339778900146484375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 34.148.153.217 - - [19/Aug/2026:09:03:31 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:09:06:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787144780.7424490451812744140625 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 84.239.42.49 - - [19/Aug/2026:09:05:59 -0400] "GET /.git/config HTTP/1.1" 200 28134 "-" "Go-http-client/1.1" 50.18.8.240 - - [19/Aug/2026:09:20:17 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "TerraCotta 0.2 https://www.github.com/ceramicTeam/CeramicTerracotta" 34.148.153.217 - - [19/Aug/2026:09:36:46 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:10:04:44 -0400] "POST /wp-cron.php?doing_wp_cron=1787148284.4234809875488281250000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [19/Aug/2026:10:04:42 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=1212968fc0 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [19/Aug/2026:10:26:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787149598.6627049446105957031250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 198.235.24.152 - - [19/Aug/2026:10:26:37 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 69.39.225.240 - - [19/Aug/2026:10:31:10 -0400] "POST /wp-cron.php?doing_wp_cron=1787149870.8667058944702148437500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 196.119.163.183 - - [19/Aug/2026:10:31:09 -0400] "GET /.env HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 196.119.163.183 - - [19/Aug/2026:10:31:11 -0400] "GET /.env HTTP/1.1" 200 28184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 69.39.225.240 - - [19/Aug/2026:10:40:36 -0400] "POST /wp-cron.php?doing_wp_cron=1787150436.0797441005706787109375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.40 - - [19/Aug/2026:10:40:34 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.40 - - [19/Aug/2026:10:40:37 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 216.244.66.237 - - [19/Aug/2026:11:25:30 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=79b767e04b HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 192.178.4.101 - - [19/Aug/2026:11:35:56 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.137 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 103.131.71.69 - - [19/Aug/2026:12:14:31 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.69 - - [19/Aug/2026:12:14:34 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [19/Aug/2026:12:16:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787156212.1179389953613281250000 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.167.204.181 - - [19/Aug/2026:12:16:50 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/103.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:12:23:57 -0400] "POST /wp-cron.php?doing_wp_cron=1787156637.5588390827178955078125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.191.45.212 - - [19/Aug/2026:12:23:56 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 130.131.228.125 - - [19/Aug/2026:13:26:18 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:26:29 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:27:10 -0400] "POST / HTTP/1.1" 200 17008 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:28:39 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:28:46 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:29:05 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:29:23 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:29:36 -0400] "POST / HTTP/1.1" 200 17008 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:30:56 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:31:18 -0400] "POST /wp-json/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:31:35 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 130.131.228.125 - - [19/Aug/2026:13:31:51 -0400] "POST / HTTP/1.1" 200 17008 "-" "Mozilla/5.0" 100.26.66.245 - - [19/Aug/2026:13:32:41 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [19/Aug/2026:14:01:02 -0400] "POST /wp-cron.php?doing_wp_cron=1787162462.3450438976287841796875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.23 - - [19/Aug/2026:14:01:00 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [19/Aug/2026:14:04:07 -0400] "POST /wp-cron.php?doing_wp_cron=1787162647.3805170059204101562500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [19/Aug/2026:14:03:58 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 69.39.225.240 - - [19/Aug/2026:14:05:44 -0400] "POST /wp-cron.php?doing_wp_cron=1787162744.4803910255432128906250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 91.92.47.210 - - [19/Aug/2026:14:05:40 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0" 111.119.249.149 - - [19/Aug/2026:14:11:04 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 159.138.121.253 - - [19/Aug/2026:14:11:01 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 46.250.169.231 - - [19/Aug/2026:14:11:04 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 46.250.171.192 - - [19/Aug/2026:14:11:02 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 183.87.46.36 - - [19/Aug/2026:14:11:01 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 49.0.244.39 - - [19/Aug/2026:14:11:04 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 146.70.165.106 - - [19/Aug/2026:15:30:46 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 146.70.165.106 - - [19/Aug/2026:15:30:46 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 122880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:16:23:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787170986.3189759254455566406250 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 66.249.70.174 - - [19/Aug/2026:16:23:05 -0400] "GET /ads.txt HTTP/1.1" 200 28168 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 45.11.172.15 - - [19/Aug/2026:16:27:14 -0400] "GET /.git/config HTTP/1.1" 200 28130 "-" "Go-http-client/1.1" 69.39.225.240 - - [19/Aug/2026:17:32:04 -0400] "POST /wp-cron.php?doing_wp_cron=1787175124.0873959064483642578125 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 45.33.102.247 - - [19/Aug/2026:17:32:03 -0400] "HEAD /wp/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 45.33.102.247 - - [19/Aug/2026:17:32:04 -0400] "HEAD /wp/ HTTP/1.1" 200 - "http://lewaf.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 45.33.102.247 - - [19/Aug/2026:17:32:04 -0400] "HEAD /new/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:05 -0400] "HEAD /new/ HTTP/1.1" 200 - "http://lewaf.com/new/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.141 Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:05 -0400] "HEAD /old/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.33.102.247 - - [19/Aug/2026:17:32:05 -0400] "HEAD /old/ HTTP/1.1" 200 - "http://lewaf.com/old/" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 45.33.102.247 - - [19/Aug/2026:17:32:06 -0400] "HEAD /blog/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:06 -0400] "HEAD /blog/ HTTP/1.1" 200 - "http://lewaf.com/blog/" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:06 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.76 Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:07 -0400] "HEAD /backup/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:08 -0400] "HEAD /backup/ HTTP/1.1" 200 - "http://lewaf.com/backup/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edg/128.0.2790.25 Chrome/128.0.6540.22 Safari/537.36" 45.33.102.247 - - [19/Aug/2026:17:32:08 -0400] "HEAD /wordpress/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.33.102.247 - - [19/Aug/2026:17:32:09 -0400] "HEAD /wordpress/ HTTP/1.1" 200 - "http://lewaf.com/wordpress/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 69.39.225.240 - - [19/Aug/2026:17:59:54 -0400] "POST /wp-cron.php?doing_wp_cron=1787176794.4278390407562255859375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 216.244.66.237 - - [19/Aug/2026:17:59:53 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=f0da081f29 HTTP/1.1" 200 212334 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [19/Aug/2026:18:03:39 -0400] "POST /wp-cron.php?doing_wp_cron=1787177018.9779520034790039062500 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.161.217.205 - - [19/Aug/2026:18:03:38 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [19/Aug/2026:19:14:36 -0400] "POST /wp-cron.php?doing_wp_cron=1787181276.3856959342956542968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 43.135.145.77 - - [19/Aug/2026:19:14:35 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [19/Aug/2026:19:42:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787182960.4309420585632324218750 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 103.131.71.88 - - [19/Aug/2026:19:42:38 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.88 - - [19/Aug/2026:19:42:41 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 72.11.155.223 - - [19/Aug/2026:20:17:14 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (CentOS; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:21:27:13 -0400] "POST /wp-cron.php?doing_wp_cron=1787189233.0444839000701904296875 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 100.50.179.0 - - [19/Aug/2026:21:27:11 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 100.49.88.137 - - [19/Aug/2026:21:27:13 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 20.206.96.72 - - [19/Aug/2026:21:27:48 -0400] "GET /wp-content/themes/seotheme/db.php?u HTTP/1.1" 403 199 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:48 -0400] "GET / HTTP/1.1" 200 17006 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:48 -0400] "POST /ALFA_DATA/alfacgiapi/perl.alfa HTTP/1.1" 200 17006 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:49 -0400] "GET /wp-content/plugins/apikey/apikey.php?test=hello HTTP/1.1" 403 199 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:49 -0400] "POST /alfacgiapi/perl.alfa HTTP/1.1" 200 17006 "www.google.com" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:49 -0400] "GET /plugins/content/apismtp/apismtp.php?test=hello HTTP/1.1" 200 17006 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:49 -0400] "GET /wp-content/plugins/apikey/apikey.php.suspected?test=hello HTTP/1.1" 200 17006 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:49 -0400] "GET /plugins/content/apismtp/apismtp.php.suspected?test=hello HTTP/1.1" 200 17006 "-" "Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 69.39.225.240 - - [19/Aug/2026:21:27:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787189272.5480821132659912109375 HTTP/1.1" 200 20 "-" "WordPress/7.0.4; https://www.lewaf.com" 20.206.96.72 - - [19/Aug/2026:21:27:48 -0400] "POST /wp-plain.php HTTP/1.1" 200 136665 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:53 -0400] "GET /zvofeldi.php?Fox=d3wL7 HTTP/1.1" 200 - "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 20.206.96.72 - - [19/Aug/2026:21:27:58 -0400] "GET /zvofeldi.php?Fox=d3wL7 HTTP/1.1" 200 136638 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Moblie Safari/537.36" 69.39.225.240 - - [19/Aug/2026:23:13:54 -0400] "POST /wp-cron.php?doing_wp_cron=1787195634.5607709884643554687500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.230.44.165 - - [19/Aug/2026:23:13:52 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 171.97.66.50 - - [19/Aug/2026:23:14:09 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:23:25:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787196324.5734291076660156250000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [19/Aug/2026:23:25:21 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=ac5fea46f5 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 145.239.10.137 - - [19/Aug/2026:23:32:00 -0400] "GET /wp-content/plugins/pwnd/403.php HTTP/1.1" 403 199 "http://lewaf.com/wp-content/plugins/pwnd/403.php" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [19/Aug/2026:23:37:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787197040.6533160209655761718750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.76.110.89 - - [19/Aug/2026:23:37:18 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [19/Aug/2026:23:43:50 -0400] "POST /wp-cron.php?doing_wp_cron=1787197430.1333940029144287109375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.160.219.138 - - [19/Aug/2026:23:43:48 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [19/Aug/2026:23:48:46 -0400] "POST /wp-cron.php?doing_wp_cron=1787197726.8847599029541015625000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.38 - - [19/Aug/2026:23:48:43 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.38 - - [19/Aug/2026:23:49:00 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 83.99.206.131 - - [20/Aug/2026:00:15:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko; GeedoShopProductFinder) Chrome/142.0.0.0 Safari/537.36" 192.178.4.100 - - [20/Aug/2026:00:20:02 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.4.100 - - [20/Aug/2026:00:20:08 -0400] "GET /ads.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.173 - - [20/Aug/2026:00:20:10 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [20/Aug/2026:00:20:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787199620.8802549839019775390625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 66.249.70.173 - - [20/Aug/2026:00:20:15 -0400] "GET /ads.txt HTTP/1.1" 200 28483 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 43.134.163.229 - - [20/Aug/2026:00:36:27 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 167.63.176.235 - - [20/Aug/2026:00:56:20 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 199.45.154.52 - - [20/Aug/2026:01:31:44 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 145.239.10.137 - - [20/Aug/2026:01:48:24 -0400] "GET /wp-content/plugins/pwnd/mah.php?p= HTTP/1.1" 403 199 "http://lewaf.com/wp-content/plugins/pwnd/mah.php?p=" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [20/Aug/2026:01:50:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787205025.5714530944824218750000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 146.70.185.43 - - [20/Aug/2026:01:50:23 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 146.70.185.43 - - [20/Aug/2026:01:50:26 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 114688 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 104.64.219.187 - - [20/Aug/2026:02:04:50 -0400] "POST /?rest_route=/batch/v1 HTTP/1.1" 403 199 "-" "Mozilla/5.0" 69.39.225.240 - - [20/Aug/2026:02:06:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787205990.1018900871276855468750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:02:06:26 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=5408eb6796 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:02:22:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787206972.1735498905181884765625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 98.84.200.43 - - [20/Aug/2026:02:22:49 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36" 103.131.71.51 - - [20/Aug/2026:02:30:02 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 80.225.197.159 - - [20/Aug/2026:02:52:20 -0400] "GET /file-manager/initialize HTTP/1.1" 200 28526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 69.39.225.240 - - [20/Aug/2026:03:13:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787210020.4058399200439453125000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.160 - - [20/Aug/2026:03:13:37 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.160 - - [20/Aug/2026:03:13:41 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 80.225.197.159 - - [20/Aug/2026:03:23:20 -0400] "GET /file-manager/initialize HTTP/1.1" 200 28526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 45.89.242.125 - - [20/Aug/2026:04:21:13 -0400] "GET /000.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 45.89.242.125 - - [20/Aug/2026:04:21:16 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 45.89.242.125 - - [20/Aug/2026:04:21:18 -0400] "GET /wp-admin/css/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/css/index.php" "Go-http-client/1.1" 45.89.242.125 - - [20/Aug/2026:04:21:18 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 45.89.242.125 - - [20/Aug/2026:04:21:19 -0400] "GET /wp-content/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 45.89.242.125 - - [20/Aug/2026:04:21:19 -0400] "GET //wp-content/plugins/fix/up.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [20/Aug/2026:04:49:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787215760.2845931053161621093750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.157.191.20 - - [20/Aug/2026:04:49:18 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 43.134.56.214 - - [20/Aug/2026:05:36:09 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [20/Aug/2026:05:44:49 -0400] "POST /wp-cron.php?doing_wp_cron=1787219089.7952570915222167968750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 114.119.137.180 - - [20/Aug/2026:05:44:47 -0400] "GET /robots.txt HTTP/1.1" 200 171 "http://www.lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 24.199.123.107 - - [20/Aug/2026:05:51:06 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:06:11:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787220713.3982260227203369140625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:06:11:51 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=f591e84b1b HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:06:39:09 -0400] "POST /wp-cron.php?doing_wp_cron=1787222349.3050420284271240234375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 8.216.32.154 - - [20/Aug/2026:06:39:06 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:07:30:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787225408.5869419574737548828125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 51.38.189.62 - - [20/Aug/2026:07:30:04 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36" 103.131.71.26 - - [20/Aug/2026:07:30:21 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [20/Aug/2026:07:30:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787225426.5141520500183105468750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.26 - - [20/Aug/2026:07:30:24 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [20/Aug/2026:07:34:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787225693.6719009876251220703125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 3.93.128.70 - - [20/Aug/2026:07:34:51 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [20/Aug/2026:07:54:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787226892.7734999656677246093750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.45 - - [20/Aug/2026:07:54:50 -0400] "GET /bless.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:54:53 -0400] "GET /O-Simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:54:55 -0400] "GET /lock360.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:54:57 -0400] "GET /zwso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.45 - - [20/Aug/2026:07:55:00 -0400] "GET /chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.45 - - [20/Aug/2026:07:55:02 -0400] "GET /about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:55:04 -0400] "GET /admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.45 - - [20/Aug/2026:07:55:06 -0400] "GET /mah.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:09 -0400] "GET /.wp/wso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:55:11 -0400] "GET /core.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.45 - - [20/Aug/2026:07:55:13 -0400] "GET /robots.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:15 -0400] "GET /inputs.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:18 -0400] "GET /mini.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.45 - - [20/Aug/2026:07:55:20 -0400] "GET /goods.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 69.39.225.240 - - [20/Aug/2026:07:55:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787226924.3026831150054931640625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.45 - - [20/Aug/2026:07:55:22 -0400] "GET /file5.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:55:24 -0400] "GET /ahax.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:27 -0400] "GET /f35.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:29 -0400] "GET /simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:31 -0400] "GET /amax.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:33 -0400] "GET /update/f35.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:55:35 -0400] "GET /wp-content/hello.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:36 -0400] "GET /wp-admin/maint/bootstrap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:38 -0400] "GET /themes/zMousse/otuz1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:40 -0400] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:41 -0400] "GET /wp-content/plugins/ubh/up.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:41 -0400] "GET /wp-admin/images/bootstrap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:55:43 -0400] "GET /images/upload.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:55:45 -0400] "GET /wp-content/plugins/seoplugins/db.php?u HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.45 - - [20/Aug/2026:07:55:46 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:46 -0400] "GET /wp-content/plugins/linkpreview/db.php?u HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:47 -0400] "GET /admin/uploads/bn_1_1754420677.phtml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:49 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/udd.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.45 - - [20/Aug/2026:07:55:52 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:55:52 -0400] "GET /wp-content/plugins/pwnd-1/pwnd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.45 - - [20/Aug/2026:07:55:53 -0400] "GET /wp-admin/css/colors/midnight/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:55:55 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/kill.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.45 - - [20/Aug/2026:07:55:57 -0400] "GET /wp-includes/style-engine/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.45 - - [20/Aug/2026:07:55:58 -0400] "GET /wp-admin/images/wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:00 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:00 -0400] "GET /wp-content/plugins/envato-css.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.45 - - [20/Aug/2026:07:56:01 -0400] "GET /classwithtostring.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:56:04 -0400] "GET /uploads/94056-upload.phtml HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:06 -0400] "GET /index/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:56:08 -0400] "GET /tinyfilemanager.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:11 -0400] "GET /js/bas.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.45 - - [20/Aug/2026:07:56:13 -0400] "GET /.well-known/pki-validation/moon.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:14 -0400] "GET /file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.45 - - [20/Aug/2026:07:56:16 -0400] "GET /wp-includes/js/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:17 -0400] "GET /wp-content/upgrade/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:17 -0400] "GET /buy.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.45 - - [20/Aug/2026:07:56:19 -0400] "GET /wp-content/languages/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:20 -0400] "GET /wp-content/themes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:56:20 -0400] "GET /wp-content/plugins/elementor/wp-wjvngrh.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.45 - - [20/Aug/2026:07:56:21 -0400] "GET /wp-includes/IXR/fix.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:24 -0400] "GET /wp-includes/widgets/dyqvcfqv.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 69.39.225.240 - - [20/Aug/2026:07:56:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787226986.4376530647277832031250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.45 - - [20/Aug/2026:07:56:24 -0400] "GET /admin/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.45 - - [20/Aug/2026:07:56:27 -0400] "GET /wp-includes/images/smilies/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:56:27 -0400] "GET /wp-includes/js/crop/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.45 - - [20/Aug/2026:07:56:27 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.45 - - [20/Aug/2026:07:56:28 -0400] "GET /wp-includes/PHPMailer/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:28 -0400] "GET /wp-includes/widgets/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:29 -0400] "GET /files/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:31 -0400] "GET /wp-includes/PHPMailer/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:32 -0400] "GET /inc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.45 - - [20/Aug/2026:07:56:34 -0400] "GET /wp-content/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:35 -0400] "GET /filemanager.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.45 - - [20/Aug/2026:07:56:37 -0400] "GET /cgi-bin/bypass.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:37 -0400] "GET /.well-known/pki-validation/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:38 -0400] "GET /wp-includes/IXR/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.45 - - [20/Aug/2026:07:56:38 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:56:40 -0400] "GET /wp-includes/js/jquery/jquery.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:41 -0400] "GET /function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.45 - - [20/Aug/2026:07:56:43 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:44 -0400] "GET /wp-signup.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:56:46 -0400] "GET /wp-admin/network/network.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:48 -0400] "GET /admin/upload/css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:50 -0400] "GET /wp-blog.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.45 - - [20/Aug/2026:07:56:53 -0400] "GET /wp-admin/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.45 - - [20/Aug/2026:07:56:55 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.45 - - [20/Aug/2026:07:56:55 -0400] "GET /wp-includes/blocks/table/int/tmpl/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:56:56 -0400] "GET /wp-l0gin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:56:58 -0400] "GET /wp-includes/js/jquery/suggest.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.45 - - [20/Aug/2026:07:56:58 -0400] "GET /new.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:57:00 -0400] "GET /wp-content/plugins/pwnd-1/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:57:01 -0400] "GET /wp-includes/defaults.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:57:01 -0400] "GET /images/DJP9.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:04 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.45 - - [20/Aug/2026:07:57:04 -0400] "GET /wp-admin/shell20211028.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:06 -0400] "GET /natural.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:09 -0400] "GET /item.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.45 - - [20/Aug/2026:07:57:11 -0400] "GET /function/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.45 - - [20/Aug/2026:07:57:13 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:57:14 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:16 -0400] "GET /wp-includes/theme-compat/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:17 -0400] "GET /about/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:57:20 -0400] "GET /wp-includes/Requests/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:20 -0400] "GET /wp-includes/ID3/about.php/wp-content/x/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.45 - - [20/Aug/2026:07:57:20 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:21 -0400] "GET /wp-content/languages/404.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.45 - - [20/Aug/2026:07:57:21 -0400] "GET /update/403.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:07:57:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787227046.3212010860443115234375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.45 - - [20/Aug/2026:07:57:24 -0400] "GET /default.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.43 - - [20/Aug/2026:07:57:27 -0400] "GET /wp-includes/assets/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:27 -0400] "GET /wp-includes/class.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:28 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.43 - - [20/Aug/2026:07:57:28 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:31 -0400] "GET /autoload_classmap/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.43 - - [20/Aug/2026:07:57:33 -0400] "GET /dropdown.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:37 -0400] "GET /images/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.43 - - [20/Aug/2026:07:57:39 -0400] "GET /db.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:42 -0400] "GET /.well-known/pki-validation/mariju.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.43 - - [20/Aug/2026:07:57:42 -0400] "GET /mah/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.43 - - [20/Aug/2026:07:57:45 -0400] "GET /wp-content/plugins/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.43 - - [20/Aug/2026:07:57:45 -0400] "GET /wp-includes/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:46 -0400] "GET /wp-content/themes/tflow/up.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:46 -0400] "GET /wp-admin/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:48 -0400] "GET /templates/beez3/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:07:57:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787227072.9438140392303466796875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.43 - - [20/Aug/2026:07:57:50 -0400] "GET /wp-admin/js/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.43 - - [20/Aug/2026:07:57:53 -0400] "GET /install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:07:57:57 -0400] "POST /wp-cron.php?doing_wp_cron=1787227077.6823210716247558593750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.43 - - [20/Aug/2026:07:57:55 -0400] "GET /wp-admin/css/colors/blue/rk2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:57:58 -0400] "GET /images/class-config.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.43 - - [20/Aug/2026:07:58:00 -0400] "GET /components/com_jea/views/form/tmpl/size.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.43 - - [20/Aug/2026:07:58:03 -0400] "GET /templates/beez/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:58:06 -0400] "GET /bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.43 - - [20/Aug/2026:07:58:09 -0400] "GET /class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:58:11 -0400] "GET /wp-admin/css/colors/light/profile.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:58:13 -0400] "GET /wp-content/product.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.43 - - [20/Aug/2026:07:58:14 -0400] "GET /wp-content/uploads/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.43 - - [20/Aug/2026:07:58:14 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ask.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.43 - - [20/Aug/2026:07:58:17 -0400] "GET /wp-includes/rest-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.43 - - [20/Aug/2026:07:58:17 -0400] "GET /css/css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:21 -0400] "GET /init.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 69.39.225.240 - - [20/Aug/2026:07:58:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787227105.1959888935089111328125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.23 - - [20/Aug/2026:07:58:23 -0400] "GET /wp-admin/user/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:25 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:07:58:28 -0400] "GET /wp-includes/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:29 -0400] "GET /assets/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:07:58:31 -0400] "GET /.well-known/pki-validation/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.23 - - [20/Aug/2026:07:58:31 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:32 -0400] "GET /css/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:34 -0400] "GET /adminfuns.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:36 -0400] "GET /wp-admin/css/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:38 -0400] "GET /wp_wlx.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:41 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:43 -0400] "GET /wp-includes/assets/husky301.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.23 - - [20/Aug/2026:07:58:44 -0400] "GET /wp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.23 - - [20/Aug/2026:07:58:46 -0400] "GET /wp-admin/css/colors/blue/wp-trackback.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:07:58:48 -0400] "GET /wp-content/themes/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.23 - - [20/Aug/2026:07:58:49 -0400] "GET /wp-header.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.23 - - [20/Aug/2026:07:58:51 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.23 - - [20/Aug/2026:07:58:52 -0400] "GET /Marvins.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.23 - - [20/Aug/2026:07:58:54 -0400] "GET /wp-content/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:54 -0400] "GET /wp-class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.23 - - [20/Aug/2026:07:58:56 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:58:57 -0400] "GET /xx.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.23 - - [20/Aug/2026:07:58:59 -0400] "GET /autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:02 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.23 - - [20/Aug/2026:07:59:02 -0400] "GET /wp-content/blue.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:03 -0400] "GET /content.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.23 - - [20/Aug/2026:07:59:05 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:07:59:07 -0400] "POST /wp-cron.php?doing_wp_cron=1787227147.5715379714965820312500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.23 - - [20/Aug/2026:07:59:05 -0400] "GET /wp-admin/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:08 -0400] "GET /wp-includes/rest-api/endpoints/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:07:59:08 -0400] "GET /wp-content/languages/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.23 - - [20/Aug/2026:07:59:09 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:09 -0400] "GET /wp-content/plugins/up/main.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.23 - - [20/Aug/2026:07:59:10 -0400] "GET /fonts/fontawesome-webfont.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:12 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:14 -0400] "GET /wp-admin/includes/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.23 - - [20/Aug/2026:07:59:17 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:19 -0400] "GET /images/images/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:21 -0400] "GET /images/class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:24 -0400] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:07:59:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787227166.2918710708618164062500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.23 - - [20/Aug/2026:07:59:24 -0400] "GET /web.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:26 -0400] "GET /wp-admin/css/colors/ocean/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:29 -0400] "GET /images/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:31 -0400] "GET /wp-content/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:31 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:32 -0400] "GET /wp-admin/css/colors/midnight/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.23 - - [20/Aug/2026:07:59:34 -0400] "GET /wp-trackback.php HTTP/1.1" 200 135 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.23 - - [20/Aug/2026:07:59:37 -0400] "GET /wp-includes/style-engine/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.23 - - [20/Aug/2026:07:59:37 -0400] "GET /radio.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:40 -0400] "GET /wp-admin/mah.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:42 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:42 -0400] "GET /wp-admin/css/colors/midnight/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.23 - - [20/Aug/2026:07:59:44 -0400] "GET /wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:47 -0400] "GET /wp-setup.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:49 -0400] "GET /ms-themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:51 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:52 -0400] "GET /style.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:54 -0400] "GET /wp-includes/infi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:07:59:55 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:07:59:57 -0400] "GET /x.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.23 - - [20/Aug/2026:07:59:59 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.23 - - [20/Aug/2026:08:00:00 -0400] "GET /css/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.23 - - [20/Aug/2026:08:00:03 -0400] "GET /images/index22.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:06 -0400] "GET /wp-user.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:11 -0400] "GET /wp-includes/pomo/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:11 -0400] "GET /wp-includes/pomo/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:08:00:12 -0400] "GET /config.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:00:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787227225.1032440662384033203125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.23 - - [20/Aug/2026:08:00:15 -0400] "GET /special.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:08:00:25 -0400] "GET /assets/script.js.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:08:00:30 -0400] "GET /wp-content/themes/twentytwentythree/patterns/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:31 -0400] "GET /wp-admin/css/colors/sunrise/colors_95.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:08:00:37 -0400] "GET /wp-includes/block-patterns/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.23 - - [20/Aug/2026:08:00:37 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:38 -0400] "GET /wp-includes/certificates/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.23 - - [20/Aug/2026:08:00:38 -0400] "GET /cgi-bin/class.api.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:39 -0400] "GET /wp-content/cache/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.23 - - [20/Aug/2026:08:00:39 -0400] "GET /wp-admin/css/colors/blue/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.23 - - [20/Aug/2026:08:00:43 -0400] "GET /wp-includes/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:44 -0400] "GET /webdb.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:47 -0400] "GET /assets/images/doc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:49 -0400] "GET /file2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:52 -0400] "GET /wp-includes/ID3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:52 -0400] "GET /alfa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:55 -0400] "GET /wp-admin/css/colors/blue/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:08:00:58 -0400] "GET /wp-includes/click.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:58 -0400] "GET /.well-known/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:00:59 -0400] "GET /wp-admin/css/colors/blue/atomlib.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:08:01:01 -0400] "GET /wp-admin/js/widgets/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:08:01:03 -0400] "GET /wp-includes/random_compat/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.23 - - [20/Aug/2026:08:01:04 -0400] "GET /wp-admin/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:01:06 -0400] "GET /edit.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.23 - - [20/Aug/2026:08:01:08 -0400] "GET /wp-content/plugins/WordPressCore/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:01:08 -0400] "GET /cgi-bin/autoload_classmap.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.23 - - [20/Aug/2026:08:01:09 -0400] "GET /wp-links-opml.php HTTP/1.1" 200 218 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.23 - - [20/Aug/2026:08:01:10 -0400] "GET /wp-admin/user/network.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.23 - - [20/Aug/2026:08:01:12 -0400] "GET /atomlib.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.23 - - [20/Aug/2026:08:01:14 -0400] "GET /wp-includes/js/jquery/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.23 - - [20/Aug/2026:08:01:14 -0400] "GET /wp-includes/xl2023.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.23 - - [20/Aug/2026:08:01:15 -0400] "GET /wp-includes/certificates/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.23 - - [20/Aug/2026:08:01:15 -0400] "GET /wp-includes/images/media/dog.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.23 - - [20/Aug/2026:08:01:16 -0400] "GET /xp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.20 - - [20/Aug/2026:08:01:18 -0400] "GET /wp-includes/SimplePie/applicationd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.20 - - [20/Aug/2026:08:01:18 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.20 - - [20/Aug/2026:08:01:19 -0400] "GET /wp-links.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.20 - - [20/Aug/2026:08:01:21 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/as.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.20 - - [20/Aug/2026:08:01:22 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.20 - - [20/Aug/2026:08:01:23 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.20 - - [20/Aug/2026:08:01:23 -0400] "GET /wp-includes/pomo/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.20 - - [20/Aug/2026:08:01:24 -0400] "GET /wp-includes/IXR/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.20 - - [20/Aug/2026:08:01:24 -0400] "GET /wp-content/plugins/phpadmin/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.20 - - [20/Aug/2026:08:01:25 -0400] "GET /wp-includes/Requests/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.20 - - [20/Aug/2026:08:01:25 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.20 - - [20/Aug/2026:08:01:26 -0400] "GET /wp-content/plugins/seoo/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.20 - - [20/Aug/2026:08:01:26 -0400] "GET /wp-includes/fonts/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:01:31 -0400] "POST /wp-cron.php?doing_wp_cron=1787227291.6321549415588378906250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.20 - - [20/Aug/2026:08:01:27 -0400] "GET /moon.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.20 - - [20/Aug/2026:08:01:32 -0400] "GET /wp-admin/user/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.29 - - [20/Aug/2026:08:01:41 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.29 - - [20/Aug/2026:08:01:44 -0400] "GET /webadmin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.29 - - [20/Aug/2026:08:01:46 -0400] "GET /wp-includes/PHPMailer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.29 - - [20/Aug/2026:08:01:47 -0400] "GET /wp-admin/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:01:49 -0400] "GET /xl2023.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:01:51 -0400] "GET /go.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:01:54 -0400] "GET /wp-admin/xleet.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:01:56 -0400] "GET /templates/beez3/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:01:58 -0400] "GET /wp-admin/css/colors/blue/ahax.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.11 - - [20/Aug/2026:08:02:00 -0400] "GET /.well-known/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:00 -0400] "GET /wp-includes/assets/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:01 -0400] "GET /cgi-bin/index.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:02:01 -0400] "GET /wp-content/uploads/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:02 -0400] "GET /wp-content/plugins/view-more/ioxi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:02:02 -0400] "GET /wp-includes/customize/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:03 -0400] "GET /wp-includes/pomo/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:03 -0400] "GET /wp-admin/css/colors/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.11 - - [20/Aug/2026:08:02:05 -0400] "GET /warm.PhP7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.11 - - [20/Aug/2026:08:02:08 -0400] "GET /wp-admin/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:02:10 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:10 -0400] "GET /wp-includes/images/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:11 -0400] "GET /wp-content/plugins/ioxi/ioxiworm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.11 - - [20/Aug/2026:08:02:11 -0400] "GET /blog/wp-content/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.11 - - [20/Aug/2026:08:02:12 -0400] "GET /hehehehe.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:14 -0400] "GET /.well-known/acme-challenge/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:15 -0400] "GET /.well-known/acme-challenge/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:15 -0400] "GET /.well-known/acme-challenge/license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:16 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:16 -0400] "GET /wp-content/themes/astra/inc/fm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:17 -0400] "GET /wp-content/plugins/ccx/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:17 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.11 - - [20/Aug/2026:08:02:18 -0400] "GET /wp-includes/Requests/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:18 -0400] "GET /wp-includes/css/dist/edit-widgets/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.11 - - [20/Aug/2026:08:02:19 -0400] "GET /wp-includes/css/dist/edit-widgets/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:19 -0400] "GET /wp-includes/Requests/src/Exception/Http/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:02:20 -0400] "GET /wp-includes/Text/Diff/Renderer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:20 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:21 -0400] "GET /wp-admin/css/colors/ocean/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:02:22 -0400] "GET /wp-includes/images/media/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:02:23 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:24 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:02:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787227346.2089829444885253906250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:02:24 -0400] "GET /wp-admin/maint/themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:26 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.11 - - [20/Aug/2026:08:02:27 -0400] "GET /wp-includes/fonts/themes.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:27 -0400] "GET /wp-content/themes/twentytwentytwo/assets/fonts/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:28 -0400] "GET /wp-includes/certificates/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:28 -0400] "GET /byp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:30 -0400] "GET /blog/wp-includes/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:02:30 -0400] "GET /wp-includes/images/media/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:02:31 -0400] "GET /blog/wp-admin/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:02:33 -0400] "GET /wp-content/themes/twentyfive/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.11 - - [20/Aug/2026:08:02:34 -0400] "GET /wp-includes/css/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:02:34 -0400] "GET /cgi-bin/install.php HTTP/1.1" 404 287 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:35 -0400] "GET /wp-content/wso.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:35 -0400] "GET /class.api.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:37 -0400] "GET /wp-includes/certificates/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.11 - - [20/Aug/2026:08:02:37 -0400] "GET /wp-content/radio.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:38 -0400] "GET /system_log.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:02:40 -0400] "GET /.alf.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:02:41 -0400] "GET /wso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.11 - - [20/Aug/2026:08:02:43 -0400] "GET /wp-includes/blocks/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.11 - - [20/Aug/2026:08:02:44 -0400] "GET /flower.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:46 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:46 -0400] "GET /wp-admin/js/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:48 -0400] "GET /wp-content/1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:02:48 -0400] "GET /ioxi-o.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:02:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787227372.3769769668579101562500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:02:51 -0400] "GET /info.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:52 -0400] "GET /setup.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:02:54 -0400] "GET /.bod/.ll/ss.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:02:56 -0400] "GET /.well-known/radio.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.11 - - [20/Aug/2026:08:02:57 -0400] "GET /wp-content/plugin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.11 - - [20/Aug/2026:08:02:57 -0400] "GET /wp-admin/css/colors/ectoplasm/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.11 - - [20/Aug/2026:08:02:59 -0400] "GET /as.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.11 - - [20/Aug/2026:08:03:01 -0400] "GET /cc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:03:03 -0400] "GET /.well-known/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:04 -0400] "GET /ab.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:06 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:03:06 -0400] "GET /wp-content/themes/twentytwentytwo/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:03:07 -0400] "GET /doc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:08 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:09 -0400] "GET /wp-includes/style-engine/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:09 -0400] "GET /mar.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:12 -0400] "GET /wp-includes/sitemaps/providers/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:03:13 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:03:15 -0400] "GET /1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:03:17 -0400] "GET /wp-includes/Text/Diff/Engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.11 - - [20/Aug/2026:08:03:18 -0400] "GET /wp-includes/style-engine/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:03:18 -0400] "GET /js/fm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.11 - - [20/Aug/2026:08:03:20 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:03:23 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:03:23 -0400] "GET /wp-content/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:24 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 69.39.225.240 - - [20/Aug/2026:08:03:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787227405.8416800498962402343750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:03:24 -0400] "GET /fm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:03:26 -0400] "GET /wp-admin/js/widgets/cloud.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:03:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787227410.4015090465545654296875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:03:28 -0400] "GET /adminfuns.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:30 -0400] "GET /wp-admin/images/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.11 - - [20/Aug/2026:08:03:32 -0400] "GET /ini.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:34 -0400] "GET /wp-admin/css/colors/coffee/cloud.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:03:36 -0400] "GET /wp-includes/blocks/calendar/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:03:36 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:03:37 -0400] "GET /.well-known/acme-challenge/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:03:37 -0400] "GET /wp-admin/js/instaall.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.11 - - [20/Aug/2026:08:03:39 -0400] "GET /wp-includes/function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.11 - - [20/Aug/2026:08:03:39 -0400] "GET /wp-includes/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:03:40 -0400] "GET /wp-content/plugins/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:03:41 -0400] "GET /wp-content.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:03:43 -0400] "GET /wp-includes/css/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:03:43 -0400] "GET /wp-includes/Text/Diff/Renderer/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:03:44 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.27 - - [20/Aug/2026:08:03:47 -0400] "GET /wp-admin/css/colors/light/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:03:48 -0400] "GET /customize.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:03:50 -0400] "GET /license.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.27 - - [20/Aug/2026:08:03:52 -0400] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.27 - - [20/Aug/2026:08:03:52 -0400] "GET /lock.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:03:55 -0400] "GET /wp-admin/css/colors/blue/gold.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:03:56 -0400] "GET /wp-includes/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:03:57 -0400] "GET /wp-includes/rest-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:03:57 -0400] "GET /.well-known/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.27 - - [20/Aug/2026:08:03:58 -0400] "GET /.well-known/wincust.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.27 - - [20/Aug/2026:08:03:58 -0400] "GET /wp-admin/css/colors/light/alfa-rex.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.27 - - [20/Aug/2026:08:04:00 -0400] "GET /wp-good.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:04:02 -0400] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:03 -0400] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:03 -0400] "GET /wp-includes/assets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.27 - - [20/Aug/2026:08:04:04 -0400] "GET /wp-content/themes/twentytwentyfour/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:04:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787227446.3709990978240966796875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.27 - - [20/Aug/2026:08:04:04 -0400] "GET /randkeyword.PhP7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:06 -0400] "GET /wp-admin/js/widgets/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:09 -0400] "GET /fonts/database.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.27 - - [20/Aug/2026:08:04:10 -0400] "GET /ff2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:12 -0400] "GET /wp-includes/SimplePie/Exception-wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:13 -0400] "GET /wp-admin/plugin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.27 - - [20/Aug/2026:08:04:15 -0400] "GET /wp-includes/rest-api/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.27 - - [20/Aug/2026:08:04:15 -0400] "GET /jp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:17 -0400] "GET /wp-atom.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:19 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:21 -0400] "GET /up.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:22 -0400] "GET /wp-content/uploads/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:04:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787227464.5930159091949462890625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.27 - - [20/Aug/2026:08:04:23 -0400] "GET /assets/images/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:25 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:25 -0400] "GET /js/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:04:27 -0400] "GET /simple/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:04:29 -0400] "GET /worm.PhP HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.27 - - [20/Aug/2026:08:04:31 -0400] "GET /ext.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.27 - - [20/Aug/2026:08:04:32 -0400] "GET /delpaths.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:04:34 -0400] "GET /.well-known/pki-validation/1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:35 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:04:35 -0400] "GET /.well-known/pki-validation/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:36 -0400] "GET /wp-admin/css/colors/sunrise/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:38 -0400] "GET /gifclass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:04:40 -0400] "GET /plugin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:41 -0400] "GET /wp-content/themes/twentytwentyfour/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:42 -0400] "GET /update-core.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:44 -0400] "GET /wp-admin/css/colors/blue/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:45 -0400] "GET /wp-mail.php HTTP/1.1" 200 2571 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:47 -0400] "GET /wp-content/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.27 - - [20/Aug/2026:08:04:48 -0400] "GET /wp-admin/defaults.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:50 -0400] "GET /.well-known/acme-challenge/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:50 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:04:51 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.27 - - [20/Aug/2026:08:04:52 -0400] "GET /wp-admin/js/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.27 - - [20/Aug/2026:08:04:54 -0400] "GET /wp-content/uploads/2023/05/404.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:54 -0400] "GET /wp-admin/maint/maint.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:04:56 -0400] "GET /assets/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.27 - - [20/Aug/2026:08:04:58 -0400] "GET /aa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:00 -0400] "GET /index2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:02 -0400] "GET /wp-content/themes/hello-element/footer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:02 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:05 -0400] "GET /.well-known/pki-validation/2index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:06 -0400] "GET /wp-content/languages/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:06 -0400] "GET /shell.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:08 -0400] "GET /.well-known/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:09 -0400] "GET /wp-includes/Text/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:09 -0400] "GET /wp-admin/network/atomlib.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.27 - - [20/Aug/2026:08:05:11 -0400] "GET /.well-known/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:11 -0400] "GET /hehe.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:13 -0400] "GET /wp-includes/fonts/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:14 -0400] "GET /css/slider.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:16 -0400] "GET /dir.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:18 -0400] "GET /wp-includes/css/atomlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:18 -0400] "GET /wp-content/style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.27 - - [20/Aug/2026:08:05:19 -0400] "GET /libraries/phpmailer/updates.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:05:21 -0400] "GET /nf_tracking.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:05:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787227524.0194740295410156250000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.27 - - [20/Aug/2026:08:05:22 -0400] "GET /wp-admin/css/about.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.27 - - [20/Aug/2026:08:05:24 -0400] "GET /filefuns.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:26 -0400] "GET /.well-known/pki-validation/class_api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:27 -0400] "GET /l.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:29 -0400] "GET /repeater.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:31 -0400] "GET /wp-admin/wso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:32 -0400] "GET /wp-includes/sitemaps/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:33 -0400] "GET /contacts.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:35 -0400] "GET /wsa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.27 - - [20/Aug/2026:08:05:37 -0400] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:38 -0400] "GET /firewall.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.27 - - [20/Aug/2026:08:05:40 -0400] "GET /wp-includes/sodium_compat/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:40 -0400] "GET /wp-content/uploads/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:41 -0400] "GET /lv.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:42 -0400] "GET /images/js1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:44 -0400] "GET /wp-admin/maint/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.27 - - [20/Aug/2026:08:05:46 -0400] "GET /.well-known/acme-challenge/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:46 -0400] "GET /.well-known/acme-challenge/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:47 -0400] "GET /wp-includes/images/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:47 -0400] "GET /wp-includes/ID3/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.27 - - [20/Aug/2026:08:05:48 -0400] "GET /wp-admin/theme-editor.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.27 - - [20/Aug/2026:08:05:50 -0400] "GET /wp-admin/css/colors/blue/abc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.27 - - [20/Aug/2026:08:05:51 -0400] "GET /wp-admin/maint/wonder.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:05:54 -0400] "GET /wp-content/themes/twentytwentyfour/wonder.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:05:55 -0400] "GET /wp-content/plugins/fix/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:05:55 -0400] "GET /tox.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:05:57 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:05:58 -0400] "GET /wp-includes/js/dist/default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:05:58 -0400] "GET /wp-admin/css/colors/tfileman.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:00 -0400] "GET /tiny.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:03 -0400] "GET /wp-admin/js/widgets/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.11 - - [20/Aug/2026:08:06:06 -0400] "GET /themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:08 -0400] "GET /wp-themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:06:11 -0400] "GET /wp-includes/sodium_compat/src/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.11 - - [20/Aug/2026:08:06:11 -0400] "GET /wp-content/plugins/erinyani/asasx.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:06:12 -0400] "GET /mariju.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.11 - - [20/Aug/2026:08:06:14 -0400] "GET /waf_defender.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:16 -0400] "GET /wp-admin/maint/cong.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:18 -0400] "GET /av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:06:21 -0400] "GET /wp-admin/css/glex.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 69.39.225.240 - - [20/Aug/2026:08:06:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787227585.1239678859710693359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:06:23 -0400] "GET /wp-admin/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:25 -0400] "GET /wp-includes/SimplePie/Parse/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.11 - - [20/Aug/2026:08:06:26 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.11 - - [20/Aug/2026:08:06:26 -0400] "GET /wp-content/themes/twentytwentyfour/system_cache.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:27 -0400] "GET /wp-content/themes/sky-pro/js.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:27 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:28 -0400] "GET /wp-content/themes/pridmag/waf_defender.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:28 -0400] "GET /theme.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:30 -0400] "GET /wp-content/themes/twentytwentytwo/waf_defender.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:31 -0400] "GET /wp-admin/css/colors/coffee/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:32 -0400] "GET /Simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:34 -0400] "GET /.well-known/acme-challenge/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:06:34 -0400] "GET /wp-admin/1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:36 -0400] "GET /wp-admin/css/colors/ocean/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.11 - - [20/Aug/2026:08:06:38 -0400] "GET /wp-content/plugins/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:39 -0400] "GET /.well-known/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.11 - - [20/Aug/2026:08:06:39 -0400] "GET /css/av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:06:41 -0400] "GET /images/waf_defender.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:43 -0400] "GET /wp-includes/SimplePie/Cache/upfile.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:43 -0400] "GET /small.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:45 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:46 -0400] "GET /NewFile.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:47 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:48 -0400] "GET /error.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:50 -0400] "GET /wp-content/plugins/pwnd/admin-footer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:50 -0400] "GET /wp-includes/widgets/class-wp-widget-search-function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:51 -0400] "GET /wp-content/languages/themes/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:51 -0400] "GET /wp-files.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.11 - - [20/Aug/2026:08:06:53 -0400] "GET /functions.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:55 -0400] "GET /wp-includes/SimplePie/Canonical.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:55 -0400] "GET /wp-includes/certificates/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.11 - - [20/Aug/2026:08:06:56 -0400] "GET /aks.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:06:57 -0400] "GET /litespeed.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:06:59 -0400] "GET /img/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:01 -0400] "GET /wp-includes/class-feed-index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.11 - - [20/Aug/2026:08:07:01 -0400] "GET /wpn.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.11 - - [20/Aug/2026:08:07:03 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:04 -0400] "GET /.well-known/acme-challenge/iR7SzrsOUEP.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:04 -0400] "GET /wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:05 -0400] "GET /wp-content/themes/twentytwentyfour/functions.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:05 -0400] "GET /wp-includes/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:07:06 -0400] "GET /wp-includes/class-wp-dependency-float.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:06 -0400] "GET /wp-includes/PHPMailer/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:07 -0400] "GET /wp-includes/PHPMailer/purna.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:07 -0400] "GET /wp-includes/interactivity-api/interactivity-api-class.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:08 -0400] "GET /wp-includes/l10n/class-wp-widddget-pages.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:08 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:10 -0400] "GET /wp-admin/css/colors/light/colors.min.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:12 -0400] "GET /wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:13 -0400] "GET /wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:13 -0400] "GET /wp-includes/ID3/module.audio-video.riff-set.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.11 - - [20/Aug/2026:08:07:14 -0400] "GET /wp-includes/js/tinymce/utils/license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:14 -0400] "GET /wp-includes/Text/options.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:15 -0400] "GET /.well-known/acme-challenge/wp-load.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:15 -0400] "GET /wp-content/upgrade/cc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:16 -0400] "GET /wp-content/themes/aahana/worksec.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:16 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:17 -0400] "GET /wp-admin/includes/class_api.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:19 -0400] "GET /plugins/content/apismtp/apismtp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:21 -0400] "GET /wp-admin/includes/class-core-upgrader-first.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:07:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787227644.5191559791564941406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:07:23 -0400] "GET /wp-admin/css/wp-css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:25 -0400] "GET /wp-includes/IXR/goto.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.11 - - [20/Aug/2026:08:07:25 -0400] "GET /wp-admin/css/colors/blue/xboom.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:27 -0400] "GET /wp-content/themes/kadence/functions.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:27 -0400] "GET /Sanskrit.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:29 -0400] "GET /wp-fmfile.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:31 -0400] "GET /.trash7309/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:33 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:33 -0400] "GET /wp-content/plugins/ioxi/ioxi/dropdown.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.11 - - [20/Aug/2026:08:07:34 -0400] "GET /memberfuns.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:36 -0400] "GET /infos.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:39 -0400] "GET /modules/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:41 -0400] "GET /wp-content/x.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:42 -0400] "GET /wp-content/wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.11 - - [20/Aug/2026:08:07:42 -0400] "GET /options-writing.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:44 -0400] "GET /options-reading.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.11 - - [20/Aug/2026:08:07:46 -0400] "GET /wsad.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:48 -0400] "GET /nation.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:49 -0400] "GET /wp-includes/js/codemirror/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:50 -0400] "GET /wp-includes/wp_class_datlib.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:50 -0400] "GET /wp-includes/js/tinymce/langs/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:07:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787227672.9224030971527099609375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.11 - - [20/Aug/2026:08:07:51 -0400] "GET /autoload_classmap/wso.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.11 - - [20/Aug/2026:08:07:53 -0400] "GET /wp-atomx.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.11 - - [20/Aug/2026:08:07:57 -0400] "GET /admin-footer.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:00 -0400] "GET /wp-admin/maint/wp-conflg.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:02 -0400] "GET /XxX.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.48 - - [20/Aug/2026:08:08:04 -0400] "GET /wp-content/plugins/ubh/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:04 -0400] "GET /wp-includes/SimplePie/Registry-private.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:05 -0400] "GET /wp-includes/assets/script-modules-packages.min-meta.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:05 -0400] "GET /wp-includes/widgets/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:06 -0400] "GET /wp-content/themes/twentytwentyfour/content-index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.48 - - [20/Aug/2026:08:08:06 -0400] "GET /admin/controller/extension/extension/alfa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:09 -0400] "GET /wp-content/themes/twentytwentyfour/system_cache.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:14 -0400] "GET /wp-admin/css/colors/modern/colors.css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:16 -0400] "GET /wp-includes/style-engine/adminfus.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.48 - - [20/Aug/2026:08:08:17 -0400] "GET /css/media-widget-vide02.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:19 -0400] "GET /wp-includes/blocks/group/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.48 - - [20/Aug/2026:08:08:19 -0400] "GET /images/buy.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:21 -0400] "GET /templates/beez3/av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:23 -0400] "GET /wp-includes/widgets/class-wp-wolf-widget.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:08:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787227705.2760930061340332031250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.48 - - [20/Aug/2026:08:08:23 -0400] "GET /wp-admin/css/colors/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.48 - - [20/Aug/2026:08:08:25 -0400] "GET /plugins/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:27 -0400] "GET /.well-known/header.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:28 -0400] "GET /wordpress/wp-content/uploads/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:28 -0400] "GET /.well-known/pki-validation/server.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:29 -0400] "GET /autoload_classmap/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:08:31 -0400] "GET /wp-content/plugins/pwnd/1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:31 -0400] "GET /wp-content/plugins/ubh/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.48 - - [20/Aug/2026:08:08:32 -0400] "GET /wp-content/uploads/anas.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.48 - - [20/Aug/2026:08:08:32 -0400] "GET /wp-admin/css/colors/blue/shell.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:34 -0400] "GET /wp-content/plugins/erinyani/default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.48 - - [20/Aug/2026:08:08:34 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:35 -0400] "GET /xex.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:37 -0400] "GET /wp-includes/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:37 -0400] "GET /wp-content/plugins/pwnd/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.48 - - [20/Aug/2026:08:08:38 -0400] "GET /upload/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:40 -0400] "GET /wp-head.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:42 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/admin-footer.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:43 -0400] "GET /wp-content/upgrade/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:44 -0400] "GET /makeasmtp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:46 -0400] "GET /wp-includes/wp-sup.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:46 -0400] "GET /wordpress/wp-includes/class-wp-http-ixr-client-view.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:47 -0400] "GET /images/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:49 -0400] "GET /wp-includes/widgets/class-t.api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:49 -0400] "GET /wp-content/edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:08:50 -0400] "GET /.well-known/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.48 - - [20/Aug/2026:08:08:50 -0400] "GET /wp-content/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:51 -0400] "GET /wp-admin/css/colors/blue/navi.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:52 -0400] "GET /wp-includes/css/dist/require-dynamic-blocks.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.48 - - [20/Aug/2026:08:08:53 -0400] "GET /xp.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:54 -0400] "GET /wp-content/languages/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.48 - - [20/Aug/2026:08:08:55 -0400] "GET /wp-content/bypass_1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:55 -0400] "GET /wp-admin/js/elementskit.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:08:58 -0400] "GET /wp-includes/widgets/class-wp-widget-rss-database.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.48 - - [20/Aug/2026:08:08:58 -0400] "GET /.well-known/pki-validation/kur.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.48 - - [20/Aug/2026:08:08:59 -0400] "GET /click.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:09:01 -0400] "GET /wp-includes/class-wp-customize-manager-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:01 -0400] "GET /wp-includes/assets/script-modules-packages.min-boolean.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:02 -0400] "GET /wp-admin/css/colors/error.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:09:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787227745.5505070686340332031250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.48 - - [20/Aug/2026:08:09:04 -0400] "GET /ALFA_DATA/alfacgiapi/all.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:06 -0400] "GET /wp-admin/images/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.48 - - [20/Aug/2026:08:09:07 -0400] "GET /.well-known/pki-validation/xmrlpc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:09:08 -0400] "GET /wp-admin/maint/repairs.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:10 -0400] "GET /wp-includes/images/smilies/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:10 -0400] "GET /wp-admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:12 -0400] "GET /wp-header.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.48 - - [20/Aug/2026:08:09:14 -0400] "GET /file.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:16 -0400] "GET /.tmb/doc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:09:18 -0400] "GET /wp-editor.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:09:20 -0400] "GET /wp-includes/style-engine-session.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:21 -0400] "GET /images/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:09:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787227764.8572950363159179687500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.48 - - [20/Aug/2026:08:09:23 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/adminfusm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:25 -0400] "GET /adminfusm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:27 -0400] "GET /js/js1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:30 -0400] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:30 -0400] "GET /wp-includes/blocks/file/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:31 -0400] "GET /wp-content/mu-plugins/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:31 -0400] "GET /wp-includes/IXR/class-IXR-cilent.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:32 -0400] "GET /wp-content/uploads/wp-cert.phtml HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:32 -0400] "GET /about/function.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.48 - - [20/Aug/2026:08:09:34 -0400] "GET /wp-includes/images/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:35 -0400] "GET /wp-includes/PHPMailer/xleet.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:09:35 -0400] "GET /wp-admin/js/widgets/doc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:37 -0400] "GET /f35_SpaceTn.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:09:39 -0400] "GET /wp-admin/css/colors/sunrise/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.48 - - [20/Aug/2026:08:09:41 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/fixed.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.48 - - [20/Aug/2026:08:09:43 -0400] "GET /wp-admin/js/widgets/themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:09:45 -0400] "GET /wp-content/plugins/fix/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:09:45 -0400] "GET /wp-includes/category-double.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:46 -0400] "GET /wp-admin/maint/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:48 -0400] "GET /blog/signatur.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.48 - - [20/Aug/2026:08:09:49 -0400] "GET /wp-includes/assets/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:50 -0400] "GET /wp-includes/widgets/security.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:09:50 -0400] "GET /include/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:52 -0400] "GET /gm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.48 - - [20/Aug/2026:08:09:54 -0400] "GET /wp-includes/class-wp-language-pack.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:09:54 -0400] "GET /js/content-type.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:56 -0400] "GET /wp-includes/class-walker-comment-client.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:09:56 -0400] "GET /about/goods.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:09:58 -0400] "GET /file/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:10:00 -0400] "GET /function/goods.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.48 - - [20/Aug/2026:08:10:02 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/bypass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.48 - - [20/Aug/2026:08:10:05 -0400] "GET /wp-content/upgrade/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.48 - - [20/Aug/2026:08:10:06 -0400] "GET /wp-includes/class-wp-network-query-stat.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.48 - - [20/Aug/2026:08:10:06 -0400] "GET /wp-content/themes/pridmag/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:10:07 -0400] "GET /plugin-install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.24 - - [20/Aug/2026:08:10:09 -0400] "GET /wp-includes/class-wp-session-tokens-https.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.24 - - [20/Aug/2026:08:10:09 -0400] "GET /wp-admin/js/load.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:12 -0400] "GET /images/firewall.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.24 - - [20/Aug/2026:08:10:14 -0400] "GET /wp-includes/images/crystal/lrs_dage.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:10:14 -0400] "GET /wp-content/upgrade/pdf.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.24 - - [20/Aug/2026:08:10:14 -0400] "GET /wp-includes/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:10:15 -0400] "GET /wp-content/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:15 -0400] "GET /wp-includes/certificates/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:16 -0400] "GET /wp-includes/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.24 - - [20/Aug/2026:08:10:16 -0400] "GET /wp-includes/customize/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:17 -0400] "GET /css/fan.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.24 - - [20/Aug/2026:08:10:22 -0400] "GET /wp-admin/css/colors/blue/colors.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:10:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787227825.6231539249420166015625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.24 - - [20/Aug/2026:08:10:24 -0400] "GET /images/mah.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.24 - - [20/Aug/2026:08:10:26 -0400] "GET /wp-content/waf_defender.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.24 - - [20/Aug/2026:08:10:26 -0400] "GET /wp-admin/css/colors/ectoplasm/content.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:10:28 -0400] "GET /wp-content/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.24 - - [20/Aug/2026:08:10:28 -0400] "GET /wp-includes/js/thickbox/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:29 -0400] "GET /wp-content/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:29 -0400] "GET /wp-content/themes/twentytwentyfour/icascreenshots.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.24 - - [20/Aug/2026:08:10:30 -0400] "GET /wp-content/upgrade/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.24 - - [20/Aug/2026:08:10:30 -0400] "GET /wp-includes/rk2.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:31 -0400] "GET /wp-admin/css/colors/ocean/alam.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:33 -0400] "GET /b.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:35 -0400] "GET /wp-includes/certificates/past.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.24 - - [20/Aug/2026:08:10:35 -0400] "GET /css/as.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.24 - - [20/Aug/2026:08:10:39 -0400] "GET /wp-content/plugins/pwnd/sst.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.24 - - [20/Aug/2026:08:10:40 -0400] "GET /wp-includes/edit-tags.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:40 -0400] "GET /wsax.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.24 - - [20/Aug/2026:08:10:42 -0400] "GET /bless.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.24 - - [20/Aug/2026:08:10:44 -0400] "GET /wp-content/uploads/system_cache.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:45 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/files.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:10:47 -0400] "GET /wp-content/themes/tflow/admin-footer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.24 - - [20/Aug/2026:08:10:47 -0400] "GET /wp-includes/css/dist/footer-default.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.24 - - [20/Aug/2026:08:10:48 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.24 - - [20/Aug/2026:08:10:48 -0400] "GET /wp-includes/widgets/class-wp-widget-meta-request.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:48 -0400] "GET /wp-content/plugins/pwnd/cloud.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:49 -0400] "GET /wp-includes/css/dist/edit-widgets/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:49 -0400] "GET /wp-content/plugins/ubh/adminfus.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:10:50 -0400] "GET /.well-known/pki-validation/webdb.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:10:50 -0400] "GET /wp-includes/l10n/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:51 -0400] "GET /wp-admin/js/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:10:53 -0400] "GET /wp-admin/js/widgets/item.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:10:56 -0400] "GET /uploads/xsec.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:00 -0400] "GET /images/Marvins.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.24 - - [20/Aug/2026:08:11:05 -0400] "GET /wp-content/plugins/pwnd-1/kurd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:06 -0400] "GET /wp-content/themes/tflow/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:06 -0400] "GET /wp-content/languages/radio.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.24 - - [20/Aug/2026:08:11:06 -0400] "GET /wp-content/uploads/fileman.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:07 -0400] "GET /wp-includes/widgets/wp-ss.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:07 -0400] "GET /wp-includes/IXR/xsec1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.24 - - [20/Aug/2026:08:11:08 -0400] "GET /admin.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:15 -0400] "GET /wp-admin/css/colors/hong1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:19 -0400] "GET /wp-admin/maint/byps.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:11:21 -0400] "GET /wp-includes/images/crystal/sad.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:21 -0400] "GET /wp-includes/assets/script-loader-packages.min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:11:22 -0400] "GET /wp-content/themes/twentytwentyfour/patterns/content-type.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 69.39.225.240 - - [20/Aug/2026:08:11:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787227884.0327050685882568359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.24 - - [20/Aug/2026:08:11:22 -0400] "GET /wp-admin/network/class.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:11:24 -0400] "GET /wp-includes/class-phpmailer-beta.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:25 -0400] "GET /wp-includes/ms-file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:25 -0400] "GET /.well-known/acme-challenge/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:26 -0400] "GET /wp-includes/widgets/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:26 -0400] "GET /chosen.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.24 - - [20/Aug/2026:08:11:30 -0400] "GET /bs1.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:11:33 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:33 -0400] "GET /wp-includes/network.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.24 - - [20/Aug/2026:08:11:34 -0400] "GET /page.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.24 - - [20/Aug/2026:08:11:36 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:38 -0400] "GET /wp-content/uploads/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:38 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.24 - - [20/Aug/2026:08:11:39 -0400] "GET /wp-content/admin-footer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.24 - - [20/Aug/2026:08:11:39 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/admin-footer.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:11:41 -0400] "GET /assets/info.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:11:43 -0400] "GET /wp-includes/SimplePie/XML/content.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.24 - - [20/Aug/2026:08:11:44 -0400] "GET /wp-includes/pomo/item.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.24 - - [20/Aug/2026:08:11:44 -0400] "GET /wp-content/1.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:46 -0400] "GET /wp-admin/css/colors/blue/wp-atom.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:48 -0400] "GET /wp-includes/pomo/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:49 -0400] "GET /wp-includes/assets/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:11:49 -0400] "GET /.well-known/acme-challenge/gecko-old.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.24 - - [20/Aug/2026:08:11:50 -0400] "GET /wp-admin/css/wp-login.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.24 - - [20/Aug/2026:08:11:52 -0400] "GET /images/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:11:54 -0400] "GET /wp-includes/widgets/class-wp-nav-widgets.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.24 - - [20/Aug/2026:08:11:54 -0400] "GET /wp-content/themes/wp-pridmag/init.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.24 - - [20/Aug/2026:08:11:55 -0400] "GET /wp-admin/install.php HTTP/1.1" 200 17008 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.24 - - [20/Aug/2026:08:11:55 -0400] "GET /wp-admin/css/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.24 - - [20/Aug/2026:08:11:58 -0400] "GET /wp-includes/sitemaps/providers/doc.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:11:59 -0400] "GET /ws.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:12:01 -0400] "GET /wp-includes/rest-api/1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:12:01 -0400] "GET /wp-includes/fonts/class_api.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.24 - - [20/Aug/2026:08:12:02 -0400] "GET /shop.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.24 - - [20/Aug/2026:08:12:04 -0400] "GET /wp-content/plugins/pwnd-1/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:12:04 -0400] "GET /wp-admin/js/widgets/setting.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:12:07 -0400] "GET /wp-includes/images/smilies/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:12:07 -0400] "GET /wp-admin/css/colors/light/as.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.24 - - [20/Aug/2026:08:12:09 -0400] "GET /wp-admin/user/header.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:12:11 -0400] "GET /wp-includes/IXR/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.24 - - [20/Aug/2026:08:12:11 -0400] "GET /wp-api.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:12:18 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.24 - - [20/Aug/2026:08:12:21 -0400] "GET /css.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:12:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787227946.7461650371551513671875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.24 - - [20/Aug/2026:08:12:23 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/db.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:12:27 -0400] "GET /wp-includes/class-wp-customize-manager-interpreter.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.2 - - [20/Aug/2026:08:12:28 -0400] "GET /wp-includes/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:28 -0400] "GET /images/fm.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:31 -0400] "GET /wp-includes/count.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:31 -0400] "GET /wp-error_log.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:33 -0400] "GET /assets/class_update_plugins.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.2 - - [20/Aug/2026:08:12:35 -0400] "GET /wp-admin/network/av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:38 -0400] "GET /templates/beez5/error.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:40 -0400] "GET /wp-admin/network/admin-footer.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:43 -0400] "GET /js/firewall.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:12:47 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.2 - - [20/Aug/2026:08:12:47 -0400] "GET /assets/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 69.39.225.240 - - [20/Aug/2026:08:12:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787227971.3341639041900634765625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.2 - - [20/Aug/2026:08:12:49 -0400] "GET /wp-admin/js/file/incpb.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:51 -0400] "GET /images/stories/themes.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:53 -0400] "GET /wp-includes/theme-compat/footer-embed-function.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.2 - - [20/Aug/2026:08:12:54 -0400] "GET /wp-includes/firewall.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:12:56 -0400] "GET /home/O-Simple.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:57 -0400] "GET /wp-includes/l10n/class-wp-translation-file-mo-event.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:58 -0400] "GET /wp-includes/vars-soap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:58 -0400] "GET /wp-content/themes/twentytwentytwo/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:12:59 -0400] "GET /style.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:00 -0400] "GET /files.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:02 -0400] "GET /wp-content/themes/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:03 -0400] "GET /wp-admin/css/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:04 -0400] "GET /saka.phP7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:13:06 -0400] "GET /wp-includes/id3/wp-work.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:07 -0400] "GET /wp-content/plugins/WordPressCore/gecko.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:13:07 -0400] "GET /baxa1.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.2 - - [20/Aug/2026:08:13:10 -0400] "GET /wp-includes/class-wp-taxonomy.editor.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:10 -0400] "GET /wp-content/plugins/pwnd/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:11 -0400] "GET /wp-includes/js/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:11 -0400] "GET /blog.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:13 -0400] "GET /about/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.2 - - [20/Aug/2026:08:13:15 -0400] "GET /wp-content/themes/pridmag/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:15 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:17 -0400] "GET /images/av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:19 -0400] "GET /wp-includes/interactivity-api/interactivity-api-xml.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:20 -0400] "GET /wp-includes/colour.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:20 -0400] "GET /elp.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:22 -0400] "GET /wp-includes/customize/class-wp-customize-background-position-control-variable.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:22 -0400] "GET /wp-includes/images/include.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.2 - - [20/Aug/2026:08:13:23 -0400] "GET /wp-content/themes/av.php.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.2 - - [20/Aug/2026:08:13:23 -0400] "GET /wp-content/plugins/pwnd-1/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:24 -0400] "GET /wp-includes/js/imgareaselect/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:13:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787228005.9101030826568603515625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.2 - - [20/Aug/2026:08:13:24 -0400] "GET /upload/bilder/cong.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:26 -0400] "GET /wp-admin/css/colors/blue/pass.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:28 -0400] "GET /wp-includes/l10n/class-wp-translations-interface.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:28 -0400] "GET /wp-includes/assets/about5.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:29 -0400] "GET /wp-admin/maint/lint-branch.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:31 -0400] "GET /wp-content/cong.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.2 - - [20/Aug/2026:08:13:31 -0400] "GET /js/db.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:13:33 -0400] "GET /.well-known/buy.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:13:34 -0400] "GET /wp-includes/ID3/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.2 - - [20/Aug/2026:08:13:34 -0400] "GET /function/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:36 -0400] "GET /wp-content/themes/tflow/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:36 -0400] "GET /wp-includes/js/dist/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.2 - - [20/Aug/2026:08:13:37 -0400] "GET /testt.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.2 - - [20/Aug/2026:08:13:38 -0400] "GET /wp-content/uploads/goods.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:39 -0400] "GET /wp-admin/js/sad.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:41 -0400] "GET /wp-includes/sitemaps/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:41 -0400] "GET /wp-includes/assets/wp-includes/assets/script-loader-packages.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:42 -0400] "GET /wp-includes/SimplePie/login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:42 -0400] "GET /network.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:45 -0400] "GET /wp-admin/css/colors/blue/alfa.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:47 -0400] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.2 - - [20/Aug/2026:08:13:47 -0400] "GET /wikindex.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:49 -0400] "GET /wp-content/plugins/seoo/alfa.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.2 - - [20/Aug/2026:08:13:49 -0400] "GET /wp-includes/SimplePie/Cache/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:50 -0400] "GET /wp-includes/css/dist/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.2 - - [20/Aug/2026:08:13:50 -0400] "GET /wp-content/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:51 -0400] "GET /wp-includes/customize/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:51 -0400] "GET /wp-includes/js/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:52 -0400] "GET /wp-admin/images/chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:13:53 -0400] "GET /wp-admin/css/colors/gold.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.2 - - [20/Aug/2026:08:13:55 -0400] "GET /wp-includes/Requests/Text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:56 -0400] "GET /wp-content/mu-plugins/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.2 - - [20/Aug/2026:08:13:56 -0400] "GET /wp-includes/sitemaps/abcd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:13:57 -0400] "GET /wp-includes/ID3/rk2.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:13:57 -0400] "GET /wp-includes/widgets/class-wp-widget-search-interpreter.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.2 - - [20/Aug/2026:08:13:58 -0400] "GET /wp-admin/css/chosen.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:14:00 -0400] "GET /wp-content/plugins/pwnd/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.2 - - [20/Aug/2026:08:14:00 -0400] "GET /wp-includes/block-template-utils-other.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.2 - - [20/Aug/2026:08:14:00 -0400] "GET /wp-content/alam.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.2 - - [20/Aug/2026:08:14:01 -0400] "GET /css/adminfusm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.2 - - [20/Aug/2026:08:14:03 -0400] "GET /wp-includes/sodium_compat/lib/widget-group.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:14:03 -0400] "GET /wp-content/raw.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:14:04 -0400] "GET /wp-includes/js/jcrop/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.2 - - [20/Aug/2026:08:14:04 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:05 -0400] "GET /wp-includes/customize/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.36 - - [20/Aug/2026:08:14:06 -0400] "GET /wp-content/uploads/2021/wp-works.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:14:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787228048.0989680290222167968750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.36 - - [20/Aug/2026:08:14:06 -0400] "GET /wp-admin/media-new.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.36 - - [20/Aug/2026:08:14:08 -0400] "GET /media-new.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:10 -0400] "GET /js/class_api.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:12 -0400] "GET /wp-content/uploads/2021/themes.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.36 - - [20/Aug/2026:08:14:12 -0400] "GET /admin/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.36 - - [20/Aug/2026:08:14:14 -0400] "GET /wp-includes/plugin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:15 -0400] "GET /wp-includes/class-wp-scripts-query.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:15 -0400] "GET /wp-admin/js/item.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.36 - - [20/Aug/2026:08:14:17 -0400] "GET /pages.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.36 - - [20/Aug/2026:08:14:19 -0400] "GET /wp-includes/ID3/module.audio-license.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.36 - - [20/Aug/2026:08:14:19 -0400] "GET /wp-content/themes/classwithtostring.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:21 -0400] "GET /uploads/function.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:14:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787228065.0287070274353027343750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.36 - - [20/Aug/2026:08:14:23 -0400] "GET /assets/js/doc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:25 -0400] "GET /assets/comfunctions.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.36 - - [20/Aug/2026:08:14:27 -0400] "GET /wp-includes/class-wp-error-module.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:28 -0400] "GET /css/adminfus.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.36 - - [20/Aug/2026:08:14:30 -0400] "GET /adminfus.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:32 -0400] "GET /wp-includes/css/litespeed.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:33 -0400] "GET /images/as.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:34 -0400] "GET /wp-admin/setup-config.php HTTP/1.1" 200 2699 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:35 -0400] "GET /wp-includes/css/dist/alam.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:35 -0400] "GET /cong.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.36 - - [20/Aug/2026:08:14:37 -0400] "GET /wp-includes/block-bindings/imagess.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.36 - - [20/Aug/2026:08:14:37 -0400] "GET /wp-content/plugins/pwnd/adminfus.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:38 -0400] "GET /wp-includes/default-filters-edit.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:38 -0400] "GET /css/install.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:40 -0400] "GET /assets/av.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:42 -0400] "GET /autoload_classmap/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:43 -0400] "GET /wp-configs.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.36 - - [20/Aug/2026:08:14:45 -0400] "GET /wp-includes/Requests/Auth/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.36 - - [20/Aug/2026:08:14:46 -0400] "GET /wp-admin/js/widgets/bless2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.53 - - [20/Aug/2026:08:14:48 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.53 - - [20/Aug/2026:08:14:50 -0400] "GET /wp-admin/item.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.53 - - [20/Aug/2026:08:14:51 -0400] "GET /wp-includes/Text/Diff/Engine/theme.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.53 - - [20/Aug/2026:08:14:52 -0400] "GET /.well-known/acme-challenge/mah.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.53 - - [20/Aug/2026:08:14:52 -0400] "GET /wp-includes/ID3/shell.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.53 - - [20/Aug/2026:08:14:53 -0400] "GET /wp-includes/customize/class-wp-customize-selective-refresh-library.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:14:53 -0400] "GET /ms-users.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.53 - - [20/Aug/2026:08:14:55 -0400] "GET /wp-admin/js/cc.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:14:57 -0400] "GET /wp-includes/Requests/library/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:14:57 -0400] "GET /wp-includes/interactivity-api/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:14:58 -0400] "GET /css/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:00 -0400] "GET /wp-content/plugins/classic-editor/alam.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:00 -0400] "GET /wordpress/wp-admin/includes/admin-filters.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.53 - - [20/Aug/2026:08:15:02 -0400] "GET /assets/content.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:04 -0400] "GET /fm.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:05 -0400] "GET /wp-content/goods.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:06 -0400] "GET /wp-includes/wp-2019.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:06 -0400] "GET /wp-includes/SimplePie/info.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:07 -0400] "GET /assets/images/cloud.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.53 - - [20/Aug/2026:08:15:09 -0400] "GET /wp-includes/log.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:09 -0400] "GET /wp-includes/assets/script-loader-react-refresh-runtime-num.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:10 -0400] "GET /wp-includes/assets/script-loader-react-refresh-entry.min-object.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:10 -0400] "GET /wp-includes/aw.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:11 -0400] "GET /update/gely.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:12 -0400] "GET /uploads/c99shell.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:14 -0400] "GET /wp-content/themes/pridmag/admin-footer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:15 -0400] "GET /uploads/lala.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.53 - - [20/Aug/2026:08:15:17 -0400] "GET /wp-includes/IXR/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:17 -0400] "GET /wp-includes/css/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:18 -0400] "GET /wp-content/plugins/wp-theme-editor/include.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:19 -0400] "GET /top.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:21 -0400] "GET /wp-includes/css/dist/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:22 -0400] "GET /wp-includes/style-engine/dedi1.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 69.39.225.240 - - [20/Aug/2026:08:15:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787228124.1445169448852539062500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.53 - - [20/Aug/2026:08:15:22 -0400] "GET /wp-admin/css/adminfusm.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.53 - - [20/Aug/2026:08:15:24 -0400] "GET /wp-content/click.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:25 -0400] "GET /wp-includes/template-less.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:25 -0400] "GET /wp-includes/pomo/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:26 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/abcd.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:27 -0400] "GET /wp-admin/css/colors/blue/admin-footer.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.53 - - [20/Aug/2026:08:15:29 -0400] "GET /retu11.PhP7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.53 - - [20/Aug/2026:08:15:31 -0400] "GET /wp-content/themes/twentytwentytwo/bypass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:31 -0400] "GET /wp-admin/css/elementskit.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:33 -0400] "GET /js/1.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:35 -0400] "GET /wp-content/themes/twentytwentyfour/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:35 -0400] "GET /wp-includes/assets/min.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:36 -0400] "GET /wp-includes/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:36 -0400] "GET /backup/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:38 -0400] "GET /wp-content/uploads/uploads.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.53 - - [20/Aug/2026:08:15:38 -0400] "GET /wp-includes/file.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.53 - - [20/Aug/2026:08:15:39 -0400] "GET /wp-content/themes.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:39 -0400] "GET /wp-includes/block-patterns/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:40 -0400] "GET /worm0.PhP7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:42 -0400] "GET /wp-includes/load.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.53 - - [20/Aug/2026:08:15:42 -0400] "GET /wp-includes/ID3/chosen.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:43 -0400] "GET /wp-includes/class-wp-theme-float.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.53 - - [20/Aug/2026:08:15:43 -0400] "GET /images/c99.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:45 -0400] "GET /wp-content/plugins/core-plugin/waf_defender.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:45 -0400] "GET /wp-content/themes/twentytwentytwo/as.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:46 -0400] "GET /wp-includes/widgets/wp-style.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:46 -0400] "GET /setup-config.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.53 - - [20/Aug/2026:08:15:48 -0400] "GET /wp-includes/widgets/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:48 -0400] "GET /wp-content/uploads/install.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.53 - - [20/Aug/2026:08:15:49 -0400] "GET /type.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.53 - - [20/Aug/2026:08:15:51 -0400] "GET /wp-includes/block-bindings/admin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:51 -0400] "GET /wp-includes/PHPMailer/autoload_classmap.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:15:51 -0400] "GET /wp-includes/theme-compat/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:52 -0400] "GET /wp-admin/maint/flex.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:54 -0400] "GET /css/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:15:55 -0400] "GET /wp-admin/user/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.53 - - [20/Aug/2026:08:15:57 -0400] "GET /files/shares/403ws.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:15:59 -0400] "GET /goat.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.53 - - [20/Aug/2026:08:16:00 -0400] "GET /images/fix.php7 HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.53 - - [20/Aug/2026:08:16:02 -0400] "GET /wp-content/themes/tflow/adminfus.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:03 -0400] "GET /files.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:04 -0400] "GET /wp-includes/assets/system.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.53 - - [20/Aug/2026:08:16:05 -0400] "GET /wp-includes/l10n/class-wp-translations-library.php%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:16:07 -0400] "GET /wp-includes/block-bindings/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:16:07 -0400] "GET /images/file.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:16:09 -0400] "GET /wp-content/plugins/linkpreview/av.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:16:09 -0400] "GET /wp-includes/customize/class-wp-customize-upload-control-cookie.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:16:10 -0400] "GET /wp-includes/ID3/simi.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:10 -0400] "GET /wp-includes/class-wp-taxonomy-sample.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:16:11 -0400] "GET /admin/assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:13 -0400] "GET /de-ideale-stookmix/wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:13 -0400] "GET /wp-includes/Requests/src/Response/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:14 -0400] "GET /wp-content/plugins/wps-hide-login/wps-hide-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:14 -0400] "GET /wp-content/plugins/wp-diambar/includes/loadme.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:15 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/filemanager.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:16 -0400] "GET /assets/images/accesson.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:18 -0400] "GET /wp-content/plugins/wp-plugin/wp-plugin.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.53 - - [20/Aug/2026:08:16:19 -0400] "GET /assets/plugins/jQuery-File-Upload/server/php/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.53 - - [20/Aug/2026:08:16:21 -0400] "GET /wp-content/plugins/wp-default/sh/member.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:21 -0400] "GET /wp-includes/ms-pie.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.53 - - [20/Aug/2026:08:16:21 -0400] "GET /.well-known/logs233/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.53 - - [20/Aug/2026:08:16:22 -0400] "GET /assets/plugins/filemanager/dialog.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:24 -0400] "GET /wp-content/plugins/wp-security-scan/secure.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:16:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787228186.0377209186553955078125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.53 - - [20/Aug/2026:08:16:24 -0400] "GET /owncloud/status.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:16:26 -0400] "GET /wp-includes/html-api/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.53 - - [20/Aug/2026:08:16:27 -0400] "GET /wp-content/uploads/autodiagnosis.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.53 - - [20/Aug/2026:08:16:27 -0400] "GET /wp-content/plugins/all-in-one-wp-security-and-firewall/templates/wp.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.53 - - [20/Aug/2026:08:16:28 -0400] "GET /wp-includes/nav-menu.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.8 - - [20/Aug/2026:08:16:29 -0400] "GET /wp-includes/css/dist/user.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:16:30 -0400] "GET /wp-content/plugins/pwnd/file-js.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.8 - - [20/Aug/2026:08:16:30 -0400] "GET /wp-content/mu-plugins/helper.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:31 -0400] "GET /wp-admin/images/archive.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.8 - - [20/Aug/2026:08:16:33 -0400] "GET /wp-admin/css/bolt.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:35 -0400] "GET /wp-content/plugins/vwcleanerplugin/bump.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:35 -0400] "GET /wp-content/plugins/upspy/up.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.8 - - [20/Aug/2026:08:16:36 -0400] "GET /templates/protostar/error.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.8 - - [20/Aug/2026:08:16:38 -0400] "GET /libraries/joomla/jmails.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.8 - - [20/Aug/2026:08:16:39 -0400] "GET /wp-content/plugins/three-column-screen-layout/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.8 - - [20/Aug/2026:08:16:40 -0400] "GET /wp-content/plugins/w3-total-cache/pub/sns.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.8 - - [20/Aug/2026:08:16:40 -0400] "GET /wp-content/plugins/Ultimate_VC_Addons/assets/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:41 -0400] "GET /wp-includes/js/dist/script-modules/block-library/search/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.8 - - [20/Aug/2026:08:16:41 -0400] "GET /wp-includes/customize/class-wp-customize-cropped-image-control.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:42 -0400] "GET /wp-includes/sitemaps/providers/ultra.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:16:42 -0400] "GET /wp-content/admin-header.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:43 -0400] "GET /wp-content/plugins/classic-editor/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.8 - - [20/Aug/2026:08:16:43 -0400] "GET /wp-content/uploads/system_core.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:16:44 -0400] "GET /wp-includes/css/dist/preferences/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:44 -0400] "GET /wp-includes/blocks/media-text/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.8 - - [20/Aug/2026:08:16:45 -0400] "GET /wp-includes/phpmailer/phpmailer.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:45 -0400] "GET /wp-content/upgrade-temp-backup/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:46 -0400] "GET /plus/90sec.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:47 -0400] "GET /.trash7206/index.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:49 -0400] "GET /storage/framework/views/core.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.8 - - [20/Aug/2026:08:16:51 -0400] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:51 -0400] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.8 - - [20/Aug/2026:08:16:52 -0400] "GET /wp-includes/blocks/latest-comments/template-loader.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:52 -0400] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.8 - - [20/Aug/2026:08:16:53 -0400] "GET /wp-content/wpvivid_uploads/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.8 - - [20/Aug/2026:08:16:53 -0400] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.8 - - [20/Aug/2026:08:16:54 -0400] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.8 - - [20/Aug/2026:08:16:54 -0400] "GET /wp-admin/dofault.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:56 -0400] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.8 - - [20/Aug/2026:08:16:56 -0400] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:16:57 -0400] "GET /wp-includes/blocks/nextpage/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.8 - - [20/Aug/2026:08:16:57 -0400] "GET /wp-content/plugins/akismet/views/cmd.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:16:59 -0400] "POST /wp-cron.php?doing_wp_cron=1787228219.4228200912475585937500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.8 - - [20/Aug/2026:08:16:58 -0400] "GET /wp-admin/includes/nav-menu-trigger.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:16:59 -0400] "GET /wp-includes/link-template-firewall.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:00 -0400] "GET /assets/plugins/plupload/examples/upload.php HTTP/1.1" 200 17008 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:01 -0400] "GET /libraries/vendor/updates.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:03 -0400] "GET /wp-content/themes/travelscape/json.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:04 -0400] "GET /themes/fitnessbase/404.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:06 -0400] "GET /wp-content/blogs.dir/about.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:06 -0400] "GET /libraries/legacy/updates.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:08 -0400] "GET /wp-content/plugins/awesome-coming-soon/come.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.8 - - [20/Aug/2026:08:17:09 -0400] "GET /wp-includes.bak/html-api/about.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.8 - - [20/Aug/2026:08:17:11 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.8 - - [20/Aug/2026:08:17:11 -0400] "GET /wp-content/themes/hideo/network.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:12 -0400] "GET /css/autoload_classmap.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:13 -0400] "GET /assets/global/plugins/plupload/examples/upload.php HTTP/1.1" 200 17008 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:14 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:15 -0400] "GET /wp-includes/SimplePie/src/Decode/HTML/sitemaps.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:15 -0400] "GET /wp-includes/mer_gagal.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:16 -0400] "GET /wp-includes/html-api/wp-login.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.8 - - [20/Aug/2026:08:17:16 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:17 -0400] "GET /wp-content/uploads/link.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.8 - - [20/Aug/2026:08:17:17 -0400] "GET /wp-content/uploads/plugins.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.8 - - [20/Aug/2026:08:17:18 -0400] "GET /wp-includes/rest-api/alfa-rex.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.8 - - [20/Aug/2026:08:17:18 -0400] "GET /wp-includes/ID3/Core32.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:18 -0400] "GET /wp-content/themes/classic/inc/json.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.8 - - [20/Aug/2026:08:17:19 -0400] "GET /admin/editor/engine.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.8 - - [20/Aug/2026:08:17:22 -0400] "GET /wp-admin/post-new.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:17:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787228245.3062560558319091796875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.8 - - [20/Aug/2026:08:17:23 -0400] "GET /lib/functions.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:25 -0400] "GET /Assets/edit.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:27 -0400] "GET /wp-includes/theme-compat/wp-conflg.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.8 - - [20/Aug/2026:08:17:28 -0400] "GET /assets/bootstrap-fileupload/lock2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:29 -0400] "GET /wp-content/plugins/envato-market/inc/class-envato-market-github.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:30 -0400] "GET /wp-content/plugins/wp-help/admin/wp-fclass.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:30 -0400] "GET /assets/jquery-ui/images/lock2.php HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:32 -0400] "GET /wp-includes/js/tinymce/skins/wordpress/images/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:33 -0400] "GET /wp-includes/Requests/library/index.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:33 -0400] "GET /update/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:35 -0400] "GET /wp-content/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.8 - - [20/Aug/2026:08:17:36 -0400] "GET /wp-admin/maint/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:36 -0400] "GET /themes/zMousse/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.8 - - [20/Aug/2026:08:17:38 -0400] "GET /wp-content/plugins/ubh/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:39 -0400] "GET /wp-admin/images/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:40 -0400] "GET /wp-content/plugins/seoplugins/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:41 -0400] "GET /wp-content/themes/pridmag/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:43 -0400] "GET /wp-content/plugins/linkpreview/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:45 -0400] "GET /modules/mod_simplefileuploadv1.3/elements/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:46 -0400] "GET /wp-content/plugins/pwnd/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.8 - - [20/Aug/2026:08:17:48 -0400] "GET /wp-content/plugins/pwnd-1/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:50 -0400] "GET /wp-admin/css/colors/midnight/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 69.39.225.240 - - [20/Aug/2026:08:17:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787228272.2015891075134277343750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.8 - - [20/Aug/2026:08:17:50 -0400] "GET /vendor/phpunit/phpunit/src/Util/PHP/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:52 -0400] "GET /wp-includes/style-engine/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:53 -0400] "GET /wp-content/plugins/core-plugin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:54 -0400] "GET /wp-content/plugins/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:17:55 -0400] "GET /js/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.8 - - [20/Aug/2026:08:17:57 -0400] "GET /.well-known/pki-validation/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:58 -0400] "GET /wp-includes/js/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.8 - - [20/Aug/2026:08:17:59 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:17:59 -0400] "GET /wp-content/languages/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:18:01 -0400] "GET /wp-content/themes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:18:01 -0400] "GET /wp-content/plugins/elementor/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:18:03 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:18:04 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.8 - - [20/Aug/2026:08:18:04 -0400] "GET /wp-includes/images/smilies/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.8 - - [20/Aug/2026:08:18:05 -0400] "GET /wp-includes/js/crop/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.8 - - [20/Aug/2026:08:18:05 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.42 - - [20/Aug/2026:08:18:07 -0400] "GET /cgi-bin/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.42 - - [20/Aug/2026:08:18:07 -0400] "GET /wp-admin/js/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:08 -0400] "GET /wp-includes/js/jquery/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:08 -0400] "GET /wp-includes/block-supports/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.42 - - [20/Aug/2026:08:18:09 -0400] "GET /wp-admin/network/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:11 -0400] "GET /wp-admin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.42 - - [20/Aug/2026:08:18:13 -0400] "GET /wp-includes/blocks/table/int/tmpl/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:14 -0400] "GET /wp-includes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.42 - - [20/Aug/2026:08:18:15 -0400] "GET /wp-includes/customize/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.42 - - [20/Aug/2026:08:18:15 -0400] "GET /wp-includes/SimplePie/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.42 - - [20/Aug/2026:08:18:16 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:16 -0400] "GET /wp-includes/Requests/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:17 -0400] "GET /wp-includes/ID3/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:17 -0400] "GET /wp-content/x/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:19 -0400] "GET /wp-includes/assets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:20 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.42 - - [20/Aug/2026:08:18:20 -0400] "GET /autoload_classmap/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:22 -0400] "GET /wp-content/themes/tflow/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 69.39.225.240 - - [20/Aug/2026:08:18:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787228305.5113470554351806640625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.42 - - [20/Aug/2026:08:18:24 -0400] "GET /templates/beez3/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.42 - - [20/Aug/2026:08:18:26 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.42 - - [20/Aug/2026:08:18:26 -0400] "GET /components/com_jea/views/form/tmpl/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:18:28 -0400] "GET /templates/beez/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:30 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:30 -0400] "GET /wp-content/uploads/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:31 -0400] "GET /wp-includes/rest-api/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:18:31 -0400] "GET /css/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:33 -0400] "GET /wp-admin/user/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.42 - - [20/Aug/2026:08:18:35 -0400] "GET /assets/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.42 - - [20/Aug/2026:08:18:37 -0400] "GET /wp-admin/css/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:38 -0400] "GET /wp-includes/rest-api/endpoints/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:38 -0400] "GET /wp-content/plugins/wp-theme-editor/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:18:40 -0400] "GET /wp-content/plugins/up/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:42 -0400] "GET /fonts/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:44 -0400] "GET /wp-admin/includes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:44 -0400] "GET /images/images/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.42 - - [20/Aug/2026:08:18:48 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:49 -0400] "GET /wp-content/plugins/dummyyummy/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:50 -0400] "GET /wp-includes/pomo/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:51 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.42 - - [20/Aug/2026:08:18:51 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:52 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:52 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.42 - - [20/Aug/2026:08:18:53 -0400] "GET /wp-content/cache/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.42 - - [20/Aug/2026:08:18:54 -0400] "GET /assets/images/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:18:56 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.42 - - [20/Aug/2026:08:18:56 -0400] "GET /wp-includes/random_compat/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.42 - - [20/Aug/2026:08:18:58 -0400] "GET /wp-content/plugins/WordPressCore/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:00 -0400] "GET /wp-includes/images/media/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:00 -0400] "GET /wp-includes/css/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:01 -0400] "GET /wp-content/plugins/phpadmin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.42 - - [20/Aug/2026:08:19:02 -0400] "GET /wp-content/plugins/seoo/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:19:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787228345.9212141036987304687500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.42 - - [20/Aug/2026:08:19:04 -0400] "GET /wp-content/plugins/view-more/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:06 -0400] "GET /wp-admin/css/colors/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:06 -0400] "GET /wp-content/themes/seotheme/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:08 -0400] "GET /wp-includes/images/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:09 -0400] "GET /wp-content/plugins/ioxi/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:10 -0400] "GET /blog/wp-content/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:12 -0400] "GET /.well-known/acme-challenge/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:14 -0400] "GET /wp-content/themes/astra/inc/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:15 -0400] "GET /wp-content/plugins/ccx/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:17 -0400] "GET /wp-includes/css/dist/edit-widgets/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:18 -0400] "GET /wp-includes/Requests/src/Exception/Http/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:18 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:19 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:19 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.42 - - [20/Aug/2026:08:19:20 -0400] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.42 - - [20/Aug/2026:08:19:20 -0400] "GET /blog/wp-includes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:22 -0400] "GET /blog/wp-admin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:19:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787228365.5043649673461914062500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.42 - - [20/Aug/2026:08:19:24 -0400] "GET /wp-content/themes/twentyfive/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:26 -0400] "GET /wp-includes/blocks/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.42 - - [20/Aug/2026:08:19:26 -0400] "GET /.bod/.ll/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:28 -0400] "GET /wp-content/themes/twentytwentytwo/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.42 - - [20/Aug/2026:08:19:29 -0400] "GET /wp-includes/html-api/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:29 -0400] "GET /wp-includes/sitemaps/providers/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:30 -0400] "GET /wp-includes/Text/Diff/Engine/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.42 - - [20/Aug/2026:08:19:30 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:31 -0400] "GET /wp-includes/blocks/calendar/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:31 -0400] "GET /wp-content/plugins/fix/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:33 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:33 -0400] "GET /wp-includes/bk/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:35 -0400] "GET /wp-content/ALFA_DATA/alfacgiapi/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.42 - - [20/Aug/2026:08:19:37 -0400] "GET /wp-content/uploads/2023/05/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:37 -0400] "GET /wp-content/themes/hello-element/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:39 -0400] "GET /wp-includes/Text/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.42 - - [20/Aug/2026:08:19:39 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:40 -0400] "GET /wp-includes/sodium_compat/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:40 -0400] "GET /wp-includes/js/dist/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:41 -0400] "GET /wp-includes/sodium_compat/src/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:41 -0400] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:43 -0400] "GET /wp-includes/SimplePie/Parse/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.42 - - [20/Aug/2026:08:19:45 -0400] "GET /wp-content/themes/sky-pro/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:46 -0400] "GET /wp-includes/SimplePie/Cache/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.42 - - [20/Aug/2026:08:19:48 -0400] "GET /wp-includes/js/tinymce/plugins/fullscreen/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.42 - - [20/Aug/2026:08:19:48 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:50 -0400] "GET /admin/controller/extension/extension/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.42 - - [20/Aug/2026:08:19:52 -0400] "GET /img/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.42 - - [20/Aug/2026:08:19:53 -0400] "GET /wp-includes/interactivity-api/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.42 - - [20/Aug/2026:08:19:54 -0400] "GET /wp-includes/l10n/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.42 - - [20/Aug/2026:08:19:54 -0400] "GET /tinyfilemanager/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.42 - - [20/Aug/2026:08:19:56 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.42 - - [20/Aug/2026:08:19:56 -0400] "GET /components/com_newsfeeds/models/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.44 - - [20/Aug/2026:08:19:59 -0400] "GET /.trash7309/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.44 - - [20/Aug/2026:08:20:00 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:03 -0400] "GET /wp-content/plugins/ioxi/ioxi/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.44 - - [20/Aug/2026:08:20:05 -0400] "GET /modules/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.44 - - [20/Aug/2026:08:20:07 -0400] "GET /wp-includes/js/codemirror/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Trident/6.0)" 45.133.176.44 - - [20/Aug/2026:08:20:07 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:08 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.44 - - [20/Aug/2026:08:20:08 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:09 -0400] "GET /plugins/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:10 -0400] "GET /wordpress/wp-content/uploads/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:12 -0400] "GET /upload/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:14 -0400] "GET /wordpress/wp-includes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:16 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.44 - - [20/Aug/2026:08:20:16 -0400] "GET /ALFA_DATA/alfacgiapi/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.44 - - [20/Aug/2026:08:20:18 -0400] "GET /.tmb/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.44 - - [20/Aug/2026:08:20:18 -0400] "GET /wp-includes/assets/wp-includes/assets/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:20 -0400] "GET /wp-includes/blocks/file/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.44 - - [20/Aug/2026:08:20:21 -0400] "GET /wp-content/mu-plugins/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:08:20:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787228424.8096470832824707031250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.44 - - [20/Aug/2026:08:20:23 -0400] "GET /blog/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:25 -0400] "GET /include/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:30 -0400] "GET /file/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:32 -0400] "GET /wp-content/themes/twentytwentyfour/patterns/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:33 -0400] "GET /images/news_event/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:77.0) Gecko/20100101 Firefox/77.0" 45.133.176.44 - - [20/Aug/2026:08:20:35 -0400] "GET /wp-content/themes/wp-pridmag/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.44 - - [20/Aug/2026:08:20:37 -0400] "GET /templates/beez5/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.44 - - [20/Aug/2026:08:20:39 -0400] "GET /wp-admin/js/file/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:41 -0400] "GET /wp-includes/id3/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.44 - - [20/Aug/2026:08:20:43 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.44 - - [20/Aug/2026:08:20:43 -0400] "GET /upload/bilder/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:45 -0400] "GET /wp-includes/Requests/Text/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.44 - - [20/Aug/2026:08:20:46 -0400] "GET /wp-includes/sodium_compat/lib/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:47 -0400] "GET /wp-includes/js/jcrop/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:47 -0400] "GET /wp-content/uploads/2021/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.44 - - [20/Aug/2026:08:20:48 -0400] "GET /assets/js/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:49 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.44 - - [20/Aug/2026:08:20:50 -0400] "GET /wp-includes/Requests/Auth/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:52 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.44 - - [20/Aug/2026:08:20:52 -0400] "GET /wp-content/plugins/classic-editor/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.44 - - [20/Aug/2026:08:20:53 -0400] "GET /wordpress/wp-admin/includes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.44 - - [20/Aug/2026:08:20:54 -0400] "GET /backup/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:20:56 -0400] "GET /files/shares/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.44 - - [20/Aug/2026:08:20:58 -0400] "GET /wp-content/plugins/xt/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.44 - - [20/Aug/2026:08:21:00 -0400] "GET /wp-content/plugins/content-management/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.44 - - [20/Aug/2026:08:21:02 -0400] "GET /wp-content/themes/Avada/licensing/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.44 - - [20/Aug/2026:08:21:04 -0400] "GET /Requests/Utility/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:21:06 -0400] "GET /themes/travelscape/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:21:07 -0400] "GET /themes/twentyseventeen/page/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:21:09 -0400] "GET /rest-api/fields/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.44 - - [20/Aug/2026:08:21:11 -0400] "GET /wp-includes/Requests/Utility/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.44 - - [20/Aug/2026:08:21:16 -0400] "GET /wp-content/plugins/tunnelforms/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.97 Safari/537.36" 45.133.176.44 - - [20/Aug/2026:08:21:20 -0400] "GET /wp-content/languages/plugins/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0" 45.133.176.7 - - [20/Aug/2026:08:21:24 -0400] "GET /wp-includes/js/tinymce/skins/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 69.39.225.240 - - [20/Aug/2026:08:21:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787228486.1815130710601806640625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.7 - - [20/Aug/2026:08:21:24 -0400] "GET /wp-includes/js/tinymce/utils/%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:26 -0400] "GET /themes/seotheme/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:28 -0400] "GET /wp-includes/js/jquery/ui/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.7 - - [20/Aug/2026:08:21:28 -0400] "GET /js/tinymce/utils/%20 HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:30 -0400] "GET /Requests/Exception/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.77 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:32 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:32 -0400] "GET /wp-json/wp/v2/give_forms/ HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.7 - - [20/Aug/2026:08:21:34 -0400] "GET /wp-content/plugins/ultimate-member/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:36 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 45.133.176.7 - - [20/Aug/2026:08:21:36 -0400] "GET /wp-content/themes/travelscape/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.7 - - [20/Aug/2026:08:21:38 -0400] "GET /wp-includes/js/plupload/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.125 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:39 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.7 - - [20/Aug/2026:08:21:39 -0400] "GET /wp-includes/images/wlw/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:41 -0400] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:21:41 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.7 - - [20/Aug/2026:08:21:42 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:21:42 -0400] "GET /wp-content/plugins/js-support-ticket/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:44 -0400] "GET /wp-content/plugins/easy-themes-manager/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:21:46 -0400] "GET /wp-content/settings/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:47 -0400] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:21:48 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:50 -0400] "GET /wp-admin/images/html-api/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.7 - - [20/Aug/2026:08:21:51 -0400] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.7 - - [20/Aug/2026:08:21:52 -0400] "GET /wp-admin/user/interactivity-api/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:53 -0400] "GET /assets/bootstrap-fileupload/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:21:55 -0400] "GET /wp-content/plugins/yanierin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.110 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:57 -0400] "GET /wp-content/themes/hideo/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:21:58 -0400] "GET /wp-content/plugins/profile-builder/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.88 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:00 -0400] "GET /wp-content/plugins/plugin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0" 69.39.225.240 - - [20/Aug/2026:08:22:03 -0400] "POST /wp-cron.php?doing_wp_cron=1787228523.3976089954376220703125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.7 - - [20/Aug/2026:08:22:01 -0400] "GET /wp-admin/network/cache/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0" 45.133.176.7 - - [20/Aug/2026:08:22:03 -0400] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:04 -0400] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:04 -0400] "GET /wp-includes/theme-compat/network/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:72.0) Gecko/20100101 Firefox/72.0" 45.133.176.7 - - [20/Aug/2026:08:22:07 -0400] "GET /wp-includes/js/dist/development/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:76.0) Gecko/20100101 Firefox/76.0" 45.133.176.7 - - [20/Aug/2026:08:22:08 -0400] "GET /management/assets/assets/css/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:09 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 45.133.176.7 - - [20/Aug/2026:08:22:10 -0400] "GET /wordpress/wp-includes/blocks/accordion/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.7 - - [20/Aug/2026:08:22:12 -0400] "GET /assets/worders_front/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:13 -0400] "GET /assets/jquery-ui/images/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:15 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.90 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:16 -0400] "GET /wp-content/themes/Avada/includes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.79 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:18 -0400] "GET /wp-content/uploads/fusion-forms/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:22:22 -0400] "GET /wp-content/themes/Avada/includes/lib/inc/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 69.39.225.240 - - [20/Aug/2026:08:22:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787228544.8209669589996337890625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.133.176.7 - - [20/Aug/2026:08:22:23 -0400] "GET /wp-content/themes/jupiter/framework/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/80.0.3987.149 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:25 -0400] "GET /wp-includes/blocks/site-title/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/58.0.3029.110 Safari/537.3" 45.133.176.7 - - [20/Aug/2026:08:22:25 -0400] "GET /wp-content/plugins/jupiterx-core/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.169 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:27 -0400] "GET /wp-content/themes/Avada/shortcodes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:29 -0400] "GET /wp-json/bricks/v1/render_element/ HTTP/1.1" 200 114 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" 45.133.176.7 - - [20/Aug/2026:08:22:31 -0400] "GET /wp-content/themes/bricks/includes/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:22:32 -0400] "GET /wp-content/themes/service-finder/inc/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:22:34 -0400] "GET /wp-includes/js/tinymce/plugins/compat3x/css/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:79.0) Gecko/20100101 Firefox/79.0" 45.133.176.7 - - [20/Aug/2026:08:22:35 -0400] "GET /wp-content/themes/service-finder/admin/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.7 - - [20/Aug/2026:08:22:36 -0400] "GET /wp-json/ HTTP/1.1" 200 1826576 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36 OPR/70.0.3728.95" 45.133.176.7 - - [20/Aug/2026:08:22:40 -0400] "GET /wp-json/wp/v2/ HTTP/1.1" 200 442134 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.61 Safari/537.36" 45.133.176.7 - - [20/Aug/2026:08:22:43 -0400] "GET /wp-content/uploads/2025/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; rv:11.0) like Gecko" 45.133.176.7 - - [20/Aug/2026:08:22:43 -0400] "GET /wp-content/uploads/2026/ HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:74.0) Gecko/20100101 Firefox/74.0" 45.133.176.7 - - [20/Aug/2026:08:22:44 -0400] "GET /wordpress/wp-admin/includes/wp-admin/js/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:67.0) Gecko/20100101 Firefox/67.0" 69.39.225.240 - - [20/Aug/2026:09:25:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787232352.2876150608062744140625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.136.244.129 - - [20/Aug/2026:09:25:50 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 69.39.225.240 - - [20/Aug/2026:09:26:59 -0400] "POST /wp-cron.php?doing_wp_cron=1787232419.1383600234985351562500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.166.1.243 - - [20/Aug/2026:09:26:57 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [20/Aug/2026:09:31:03 -0400] "POST /wp-cron.php?doing_wp_cron=1787232663.7780640125274658203125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.75.163.137 - - [20/Aug/2026:09:31:02 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 69.39.225.240 - - [20/Aug/2026:09:53:41 -0400] "POST /wp-cron.php?doing_wp_cron=1787234021.6047189235687255859375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.136.244.129 - - [20/Aug/2026:09:53:39 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 88.167.40.233 - - [20/Aug/2026:09:54:18 -0400] "GET / HTTP/1.1" 200 - "-" "ResilientShield-DomainValidation/1.0" 69.39.225.240 - - [20/Aug/2026:10:02:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787234525.1495749950408935546875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:10:02:02 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:10:10:39 -0400] "POST /wp-cron.php?doing_wp_cron=1787235039.3268029689788818359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:10:10:37 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=e27583155a HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:10:11:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787235084.0408699512481689453125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.75.163.137 - - [20/Aug/2026:10:11:22 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 216.244.66.237 - - [20/Aug/2026:10:11:38 -0400] "GET /wp-content/uploads/2021/09/batter-4-2.png HTTP/1.1" 200 163196 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 43.134.62.67 - - [20/Aug/2026:10:18:43 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [20/Aug/2026:10:50:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787237452.0614778995513916015625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:10:50:50 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=daf3104f3a HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:11:36:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787240160.3685989379882812500000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 47.128.42.1 - - [20/Aug/2026:11:35:57 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://bytedance.sg.larkoffice.com/docx/K5bxdypulop3IIxrJb0lOjLVgFe)" 103.131.71.43 - - [20/Aug/2026:12:33:09 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [20/Aug/2026:12:42:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787244120.6833100318908691406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 54.202.110.157 - - [20/Aug/2026:12:41:58 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 186.96.209.3 - - [20/Aug/2026:12:55:51 -0400] "GET http://www.lewaf.com/ HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36" 216.244.66.237 - - [20/Aug/2026:13:00:45 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=b3e19fb99b HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 23.22.35.187 - - [20/Aug/2026:13:31:45 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 3.15.153.234 - - [20/Aug/2026:13:54:31 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 3.15.153.234 - - [20/Aug/2026:13:54:40 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 146.70.165.106 - - [20/Aug/2026:14:10:49 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 146.70.165.106 - - [20/Aug/2026:14:10:52 -0400] "GET /wp-content/plugins/wpmudev-updates/changelog.txt HTTP/1.1" 200 122880 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/126 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:14:27:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787250445.5222730636596679687500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.217.118.118 - - [20/Aug/2026:14:27:22 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 20.122.142.214 - - [20/Aug/2026:15:35:14 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:14 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:17 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 137964 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:19 -0400] "GET /wp-admin/zoko.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:21 -0400] "GET /wp-admin/zoko.php HTTP/1.1" 200 137940 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:35:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787254525.7714109420776367187500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:35:23 -0400] "GET /wp-api.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:26 -0400] "GET /wp-api.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:42 -0400] "GET /wp-at.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:35:45 -0400] "GET /wp-atomx.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:02 -0400] "GET /wp-bugs.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:04 -0400] "GET /wp-bugs.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:07 -0400] "GET /wpconf.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:10 -0400] "GET /wpconf.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:12 -0400] "GET /wp-configs.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:15 -0400] "GET /wp-configs.php HTTP/1.1" 200 137934 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:18 -0400] "GET /wp-config-sample.php HTTP/1.1" 200 2482 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:21 -0400] "GET /wp-content.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [20/Aug/2026:15:36:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787254585.8607289791107177734375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:36:23 -0400] "GET /wp-content.php HTTP/1.1" 200 137934 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:25 -0400] "GET /wp-content.php.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:28 -0400] "GET /wp-content.php.php HTTP/1.1" 200 137942 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/1.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/options.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/ova.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/plugin.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/postnews.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/product.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/radio.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/raw.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/txets.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/w.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/wp.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/wso.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/x.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/x/index.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-content/xyn.php HTTP/1.1" 403 199 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:30 -0400] "GET /wp-cxx.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:32 -0400] "GET /wp-cxx.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:35 -0400] "GET /wper3.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:37 -0400] "GET /wper3.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:39 -0400] "GET /wp-error_log.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:41 -0400] "GET /wp-error_log.php HTTP/1.1" 200 137938 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:43 -0400] "GET /wp-file-120.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:45 -0400] "GET /wp-file-120.php HTTP/1.1" 200 137936 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:47 -0400] "GET /wp-files.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:49 -0400] "GET /wp-files.php HTTP/1.1" 200 137930 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:36:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787254613.3392651081085205078125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:36:51 -0400] "GET /wp-fmfile.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:53 -0400] "GET /wp-fmfile.php HTTP/1.1" 200 137932 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:55 -0400] "GET /wp-god.Php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:36:58 -0400] "GET /wp-god.Php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:00 -0400] "GET /wp-good3.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:02 -0400] "GET /wp-good3.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:04 -0400] "GET /wpgum.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:06 -0400] "GET /wpgum.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:08 -0400] "GET /wp-head.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:09 -0400] "GET /wp-head.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:11 -0400] "GET /wp-header.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:13 -0400] "GET /wp-header.php HTTP/1.1" 200 137932 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:15 -0400] "GET /wp-home.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:17 -0400] "GET /wp-home.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:19 -0400] "GET /wp-kaori.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:21 -0400] "GET /wp-kaori.php HTTP/1.1" 200 137930 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:37:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787254645.3557341098785400390625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:37:23 -0400] "GET /wp-kd4xalrg7m.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:26 -0400] "GET /wp-kd4xalrg7m.php HTTP/1.1" 200 137940 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:28 -0400] "GET /wp-l0gin.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:31 -0400] "GET /wp-l0gin.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:33 -0400] "GET /--wp-lgj.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:35 -0400] "GET /--wp-lgj.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:38 -0400] "GET /wp-links-opml.php HTTP/1.1" 200 218 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:40 -0400] "GET /wplog.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:42 -0400] "GET /wplog.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:44 -0400] "GET /wpls.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:46 -0400] "GET /wpls.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:48 -0400] "GET /wp-m5g2s0x9v4.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [20/Aug/2026:15:37:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787254672.5767350196838378906250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:37:50 -0400] "GET /wp-m5g2s0x9v4.php HTTP/1.1" 200 137940 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:52 -0400] "GET /wp-michan.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:54 -0400] "GET /wp-michan.php HTTP/1.1" 200 137932 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:56 -0400] "GET /wp-mt.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:37:58 -0400] "GET /wp-mt.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:38:00 -0400] "GET /wp-mter.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [20/Aug/2026:15:40:15 -0400] "POST /wp-cron.php?doing_wp_cron=1787254815.3568339347839355468750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:40:13 -0400] "GET /wp-png.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:15 -0400] "GET /wp-png.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:18 -0400] "GET /wp-post-data.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:20 -0400] "GET /wp-post-data.php HTTP/1.1" 200 137938 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:40:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787254825.7444519996643066406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:40:23 -0400] "GET /wp-rrtx.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:26 -0400] "GET /wp-rrtx.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:28 -0400] "GET /wps.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:30 -0400] "GET /wps.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:32 -0400] "GET /wp-seo.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:33 -0400] "GET /wp-seo.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:35 -0400] "GET /wp-settings.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:48 -0400] "GET /wp-sing.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:52 -0400] "GET /wp-sing.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:55 -0400] "GET /wp-slss.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:57 -0400] "GET /wp-slss.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:40:59 -0400] "GET /wp-stat.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:01 -0400] "GET /wp-stat.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:03 -0400] "GET /wp-themes.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:05 -0400] "GET /wp-themes.php HTTP/1.1" 200 137932 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:07 -0400] "GET /wp-tkdc.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:09 -0400] "GET /wp-tkdc.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:12 -0400] "GET /wp-tot.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:15 -0400] "GET /wp-tot.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:17 -0400] "GET /wp-trc.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:20 -0400] "GET /wp-trc.php HTTP/1.1" 200 137926 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:41:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787254884.4498178958892822265625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:41:22 -0400] "GET /wp-tymanage.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:24 -0400] "GET /wp-tymanage.php HTTP/1.1" 200 137936 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:26 -0400] "GET /wp-user.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:28 -0400] "GET /wp-user.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:30 -0400] "GET /wp-ws38.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:32 -0400] "GET /wp-ws38.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:34 -0400] "GET /wpxml.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:36 -0400] "GET /wpxml.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:38 -0400] "GET /wqqs.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:40 -0400] "GET /wqqs.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:42 -0400] "GET /ws33.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:44 -0400] "GET /ws33.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:46 -0400] "GET /ws34.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:48 -0400] "GET /ws34.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:50 -0400] "GET /ws36.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:52 -0400] "GET /ws36.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:54 -0400] "GET /ws37.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:56 -0400] "GET /ws37.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:41:58 -0400] "GET /ws45.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:42:00 -0400] "GET /ws45.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:42:03 -0400] "GET /ws49.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:42:05 -0400] "GET /ws49.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:42:07 -0400] "GET /ws55.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:42:09 -0400] "GET /ws55.php HTTP/1.1" 200 137922 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:44:23 -0400] "POST /wp-cron.php?doing_wp_cron=1787255063.2462229728698730468750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:44:21 -0400] "GET /ws77.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:25 -0400] "GET /ws77.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:27 -0400] "GET /ws78.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:29 -0400] "GET /ws78.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:31 -0400] "GET /ws80.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:34 -0400] "GET /ws80.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:36 -0400] "GET /ws85.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:38 -0400] "GET /ws85.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:40 -0400] "GET /ws86.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:43 -0400] "GET /ws86.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:45 -0400] "GET /ws88.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:47 -0400] "GET /ws88.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:49 -0400] "GET /wsa.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:51 -0400] "GET /wsa.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:53 -0400] "GET /wsad.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:56 -0400] "GET /wsad.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:44:58 -0400] "GET /wsax.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [20/Aug/2026:15:45:03 -0400] "POST /wp-cron.php?doing_wp_cron=1787255103.1459848880767822265625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:45:01 -0400] "GET /wsax.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:03 -0400] "GET /wso.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:05 -0400] "GET /wso.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:08 -0400] "GET /wso-x569.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:10 -0400] "GET /wso-x569.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:13 -0400] "GET /wta.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:17 -0400] "GET /wta.php HTTP/1.1" 200 137920 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:45:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787255124.8368570804595947265625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:45:21 -0400] "GET /wtiiy.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:25 -0400] "GET /wtiiy.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:31 -0400] "GET /wto.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:31 -0400] "GET /wto.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:32 -0400] "GET /wuasr.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:33 -0400] "GET /wuasr.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:34 -0400] "GET /wunaivpl.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:35 -0400] "GET /wunaivpl.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:36 -0400] "GET /ww1.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:36 -0400] "GET /ww1.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:37 -0400] "GET /ww3.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:37 -0400] "GET /ww3.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:38 -0400] "GET /www.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:39 -0400] "GET /www.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:39 -0400] "GET /wxjir.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:40 -0400] "GET /wxjir.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:41 -0400] "GET /wyzer1.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:41 -0400] "GET /wyzer1.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:42 -0400] "GET /wyzer3.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:42 -0400] "GET /wyzer3.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:43 -0400] "GET /x0rg.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:44 -0400] "GET /x0rg.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:45 -0400] "GET /x123.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:45 -0400] "GET /x123.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:46 -0400] "GET /x1da.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:46 -0400] "GET /x1da.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:47 -0400] "GET /x402.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:47 -0400] "GET /x402.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:48 -0400] "GET /x7.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:48 -0400] "GET /x7.php HTTP/1.1" 200 137918 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:49 -0400] "GET /xboom.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:50 -0400] "GET /xboom.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:50 -0400] "GET /xBrain.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:51 -0400] "GET /xBrain.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:52 -0400] "GET /xd.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:52 -0400] "GET /xd.php HTTP/1.1" 200 137918 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:53 -0400] "GET /xdmah.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:53 -0400] "GET /xdmah.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:55 -0400] "GET /Xeforce.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:55 -0400] "GET /Xeforce.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:56 -0400] "GET /xeqdlun.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:56 -0400] "GET /xeqdlun.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:57 -0400] "GET /xex.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:58 -0400] "GET /xex.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:58 -0400] "GET /xff.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:59 -0400] "GET /xff.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:45:59 -0400] "GET /xfile25.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:00 -0400] "GET /xfile25.php HTTP/1.1" 200 137928 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:00 -0400] "GET /xfun.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:01 -0400] "GET /xfun.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:02 -0400] "GET /xinder.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:02 -0400] "GET /xinder.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:03 -0400] "GET /xingkong/index.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:03 -0400] "GET /xingkong/ HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:04 -0400] "GET /xjhob.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:05 -0400] "GET /xjhob.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:05 -0400] "GET /xl2023.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:06 -0400] "GET /xl2023.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:06 -0400] "GET /xl2024.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:07 -0400] "GET /xl2024.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:07 -0400] "GET /xmlrpc.php HTTP/1.1" 200 42 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:08 -0400] "GET /xmlss.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:08 -0400] "GET /xmlss.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:09 -0400] "GET /xmnou.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:09 -0400] "GET /xmnou.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:10 -0400] "GET /xmr.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:11 -0400] "GET /xmr.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:12 -0400] "GET /xoldj.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:13 -0400] "GET /xoldj.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:14 -0400] "GET /xopvne.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:15 -0400] "GET /xopvne.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:16 -0400] "GET /xox.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:17 -0400] "GET /xox.php HTTP/1.1" 200 137920 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:46:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787255190.3051919937133789062500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:46:29 -0400] "GET /xp.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:31 -0400] "GET /xp.php HTTP/1.1" 200 137918 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:32 -0400] "GET /xper1.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:32 -0400] "GET /xper1.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:33 -0400] "GET /xpohywjo.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:34 -0400] "GET /xpohywjo.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:35 -0400] "GET /xpwer1.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:35 -0400] "GET /xpwer1.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:36 -0400] "GET /xqPt1nWJXye.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:36 -0400] "GET /xqPt1nWJXye.php HTTP/1.1" 200 137936 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:37 -0400] "GET /xr.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:38 -0400] "GET /xr.php HTTP/1.1" 200 137918 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:39 -0400] "GET /xrawp.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:39 -0400] "GET /xrawp.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:40 -0400] "GET /xrp.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:40 -0400] "GET /xrp.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:41 -0400] "GET /xs5x46mb.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:41 -0400] "GET /xs5x46mb.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:42 -0400] "GET /xtgirlms.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:42 -0400] "GET /xtgirlms.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:43 -0400] "GET /xvs.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:44 -0400] "GET /xvs.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:45 -0400] "GET /xwx1.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:45 -0400] "GET /xwx1.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:46 -0400] "GET /xxl.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:47 -0400] "GET /xxl.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:48 -0400] "GET /xxw.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:49 -0400] "GET /xxw.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:50 -0400] "GET /XxX.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:50 -0400] "GET /XxX.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:51 -0400] "GET /xxxx.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:52 -0400] "GET /xxxx.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:53 -0400] "GET /xy.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:53 -0400] "GET /xy.php HTTP/1.1" 200 137918 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:54 -0400] "GET /xy/index.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:54 -0400] "GET /xy/ HTTP/1.1" 200 137912 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:55 -0400] "GET /xy9brdftkyivz9ij6rusmsCdefault.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:56 -0400] "GET /xy9brdftkyivz9ij6rusmsCdefault.php HTTP/1.1" 200 137974 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:46:58 -0400] "GET /yaztn.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:01 -0400] "GET /yaztn.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:02 -0400] "GET /yjoxrfglsep.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:02 -0400] "GET /yjoxrfglsep.php HTTP/1.1" 200 137936 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:04 -0400] "GET /ynz.PhP HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:04 -0400] "GET /ynz.PhP HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:05 -0400] "GET /yongxing/index.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:06 -0400] "GET /yongxing/ HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:06 -0400] "GET /yunu.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:07 -0400] "GET /yunu.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:08 -0400] "GET /yvltn.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:08 -0400] "GET /yvltn.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:09 -0400] "GET /ywwbf.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:10 -0400] "GET /ywwbf.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:10 -0400] "GET /z3ki.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:11 -0400] "GET /z3ki.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:11 -0400] "GET /z43agz.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:12 -0400] "GET /z43agz.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:12 -0400] "GET /z57.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:13 -0400] "GET /z57.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:13 -0400] "GET /zabbix.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:14 -0400] "GET /zabbix.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:14 -0400] "GET /zabbix/zabbix.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:15 -0400] "GET /zabbix/zabbix.php HTTP/1.1" 200 137940 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:16 -0400] "GET /zample.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:16 -0400] "GET /zample.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:17 -0400] "GET /zc-104.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:18 -0400] "GET /zc-104.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:19 -0400] "GET /zc-208.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:20 -0400] "GET /zc-208.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:20 -0400] "GET /zc-729.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:21 -0400] "GET /zc-729.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:22 -0400] "GET /zews.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:22 -0400] "GET /zews.php HTTP/1.1" 200 137922 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:47:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787255244.0871109962463378906250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.122.142.214 - - [20/Aug/2026:15:47:23 -0400] "GET /zfile.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:24 -0400] "GET /zfile.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:24 -0400] "GET /ZHopizXxeQB.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:25 -0400] "GET /ZHopizXxeQB.php HTTP/1.1" 200 137936 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:26 -0400] "GET /zi-936.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:26 -0400] "GET /zi-936.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:27 -0400] "GET /zildan.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:27 -0400] "GET /zildan.php HTTP/1.1" 200 137926 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:28 -0400] "GET /zip.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:28 -0400] "GET /zip.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:29 -0400] "GET /zk.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:30 -0400] "GET /zk.php HTTP/1.1" 200 137918 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:34 -0400] "GET /zkotynva.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:34 -0400] "GET /zkotynva.php HTTP/1.1" 200 137930 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:35 -0400] "GET /zleqd.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:36 -0400] "GET /zleqd.php HTTP/1.1" 200 137924 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:36 -0400] "GET /Zoo.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:37 -0400] "GET /Zoo.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:38 -0400] "GET /zsec.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:39 -0400] "GET /zsec.php HTTP/1.1" 200 137922 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:40 -0400] "GET /zup.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:40 -0400] "GET /zup.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:43 -0400] "GET /zwq.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:44 -0400] "GET /zwq.php HTTP/1.1" 200 137920 "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:44 -0400] "GET /zwso.php HTTP/1.1" 200 - "-" "-" 20.122.142.214 - - [20/Aug/2026:15:47:45 -0400] "GET /zwso.php HTTP/1.1" 200 137922 "-" "-" 69.39.225.240 - - [20/Aug/2026:15:59:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787255970.6262168884277343750000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.131.36.84 - - [20/Aug/2026:15:59:30 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 66.249.70.174 - - [20/Aug/2026:16:20:20 -0400] "GET /ads.txt HTTP/1.1" 200 28477 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [20/Aug/2026:16:22:29 -0400] "POST /wp-cron.php?doing_wp_cron=1787257349.7196938991546630859375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 40.88.21.235 - - [20/Aug/2026:16:22:28 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [20/Aug/2026:16:24:11 -0400] "POST /wp-cron.php?doing_wp_cron=1787257450.9794390201568603515625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.230.176.20 - - [20/Aug/2026:16:24:10 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 34.230.176.20 - - [20/Aug/2026:16:24:11 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [20/Aug/2026:17:53:17 -0400] "POST /wp-cron.php?doing_wp_cron=1787262797.3567841053009033203125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.155.157.239 - - [20/Aug/2026:17:53:16 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 129.225.125.127 - - [20/Aug/2026:18:08:15 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 129.225.125.127 - - [20/Aug/2026:18:08:16 -0400] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" 69.39.225.240 - - [20/Aug/2026:18:17:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787264242.0111029148101806640625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 105.112.105.246 - - [20/Aug/2026:18:17:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:18:27:44 -0400] "POST /wp-cron.php?doing_wp_cron=1787264864.4912490844726562500000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 73.174.47.39 - - [20/Aug/2026:18:27:43 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:18:58:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787266680.0942869186401367187500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 51.68.236.59 - - [20/Aug/2026:18:57:59 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.59 - - [20/Aug/2026:18:58:00 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.59 - - [20/Aug/2026:18:58:01 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.59 - - [20/Aug/2026:18:58:06 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [20/Aug/2026:19:25:57 -0400] "POST /wp-cron.php?doing_wp_cron=1787268357.2141020298004150390625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.62 - - [20/Aug/2026:19:25:56 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.62 - - [20/Aug/2026:19:25:58 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [20/Aug/2026:19:43:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787269402.2948620319366455078125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:19:43:21 -0400] "GET /portfolio-item/art-5/ HTTP/1.1" 200 153433 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:19:51:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787269882.2475850582122802734375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:19:51:21 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=d5119ecad1 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:19:51:26 -0400] "POST /wp-cron.php?doing_wp_cron=1787269886.8537468910217285156250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:19:51:26 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=fdb07af552 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 85.208.98.18 - - [20/Aug/2026:20:01:58 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; SemrushBot; +http://www.semrush.com/bot.html)" 69.39.225.240 - - [20/Aug/2026:20:09:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787270960.9397950172424316406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 69.39.225.240 - - [20/Aug/2026:20:09:20 -0400] "POST /wp-cron.php?doing_wp_cron=1787270960.9401340484619140625000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 49.0.244.39 - - [20/Aug/2026:20:09:19 -0400] "GET /ip HTTP/1.1" 200 138024 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 190.92.201.175 - - [20/Aug/2026:20:09:19 -0400] "GET /ip HTTP/1.1" 200 138027 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 149.232.141.129 - - [20/Aug/2026:20:09:19 -0400] "GET /ip HTTP/1.1" 200 122880 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 149.232.142.236 - - [20/Aug/2026:20:09:22 -0400] "GET /ip HTTP/1.1" 200 138028 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 40.88.21.235 - - [20/Aug/2026:20:25:29 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [20/Aug/2026:21:00:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787274022.0996060371398925781250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 40.88.21.235 - - [20/Aug/2026:21:00:21 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [20/Aug/2026:21:15:33 -0400] "POST /wp-cron.php?doing_wp_cron=1787274933.8325750827789306640625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:21:15:33 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=615220219e HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [20/Aug/2026:21:55:48 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=0ffb983bc6 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [20/Aug/2026:21:55:52 -0400] "GET /cart/?remove_item=ceb8d4ba118f6cfe3c60e82d306dfd73&_wpnonce=bc089eda24 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:22:19:01 -0400] "POST /wp-cron.php?doing_wp_cron=1787278741.9294800758361816406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.34.253.229 - - [20/Aug/2026:22:19:01 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 103.131.71.43 - - [20/Aug/2026:22:21:22 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [20/Aug/2026:22:21:29 -0400] "POST /wp-cron.php?doing_wp_cron=1787278889.6122601032257080078125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.43 - - [20/Aug/2026:22:21:29 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 210.213.66.211 - - [20/Aug/2026:22:25:26 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:22:29:15 -0400] "POST /wp-cron.php?doing_wp_cron=1787279355.7261619567871093750000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.164.0.96 - - [20/Aug/2026:22:29:15 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [20/Aug/2026:23:10:16 -0400] "POST /wp-cron.php?doing_wp_cron=1787281816.0992429256439208984375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [20/Aug/2026:23:10:15 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [20/Aug/2026:23:20:11 -0400] "POST /wp-cron.php?doing_wp_cron=1787282411.0125939846038818359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 213.188.78.115 - - [20/Aug/2026:23:20:10 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" 69.39.225.240 - - [20/Aug/2026:23:25:17 -0400] "POST /wp-cron.php?doing_wp_cron=1787282717.6939699649810791015625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 114.119.137.7 - - [20/Aug/2026:23:25:17 -0400] "GET /robots.txt HTTP/1.1" 200 20 "http://lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 114.119.137.7 - - [20/Aug/2026:23:25:18 -0400] "GET /robots.txt HTTP/1.1" 200 171 "http://lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 69.39.225.240 - - [21/Aug/2026:00:02:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787284975.2903900146484375000000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 192.178.4.101 - - [21/Aug/2026:00:02:54 -0400] "GET /ads.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.173 - - [21/Aug/2026:00:03:02 -0400] "GET /ads.txt HTTP/1.1" 200 28484 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [21/Aug/2026:00:28:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787286512.1172690391540527343750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.46 - - [21/Aug/2026:00:28:31 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [21/Aug/2026:00:34:41 -0400] "POST /wp-cron.php?doing_wp_cron=1787286881.3108530044555664062500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:00:34:40 -0400] "GET /portfolio-item/art-6/ HTTP/1.1" 200 153004 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 105.119.3.86 - - [21/Aug/2026:00:45:57 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:00:52:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787287942.5053310394287109375000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.79.230.17 - - [21/Aug/2026:00:52:21 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:01:16:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787289360.6300079822540283203125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:01:16:00 -0400] "GET /portfolio-item/art-5/feed/ HTTP/1.1" 200 741 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [21/Aug/2026:02:01:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787292098.8395879268646240234375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.185 - - [21/Aug/2026:02:01:38 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.185 - - [21/Aug/2026:02:01:40 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [21/Aug/2026:02:07:52 -0400] "POST /wp-cron.php?doing_wp_cron=1787292472.5554740428924560546875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:02:07:49 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=f77f1d1fe0 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [21/Aug/2026:02:08:00 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=99c889b717 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [21/Aug/2026:02:08:08 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=63b4f74a2f HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 194.110.207.62 - - [21/Aug/2026:02:16:13 -0400] "GET /index.php?rest_route=/wp/v2/plugins HTTP/1.1" 200 6635 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2638.22 Safari/537.36" 194.110.207.62 - - [21/Aug/2026:02:16:16 -0400] "GET /index.php?rest_route=/wp/v2/plugins HTTP/1.1" 200 6634 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 10.0; Win64; x64; Trident/6.0)" 194.110.207.62 - - [21/Aug/2026:02:16:16 -0400] "GET /wp-json/wp/v2/plugins HTTP/1.1" 200 6634 "http://lewaf.com/index.php?rest_route=/wp/v2/plugins" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 10.0; Win64; x64; Trident/6.0)" 194.110.207.62 - - [21/Aug/2026:02:16:54 -0400] "GET /wp-json/wp/v2/plugins HTTP/1.1" 200 6635 "http://lewaf.bronze-server.com/index.php?rest_route=/wp/v2/plugins" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2638.22 Safari/537.36" 54.152.198.76 - - [21/Aug/2026:02:26:10 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [21/Aug/2026:02:39:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787294348.4567620754241943359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 185.217.0.59 - - [21/Aug/2026:02:39:07 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/120.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:02:39:27 -0400] "POST /wp-cron.php?doing_wp_cron=1787294367.2290809154510498046875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 108.186.112.90 - - [21/Aug/2026:02:39:24 -0400] "GET / HTTP/1.1" 200 20 "http://lewaf.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 108.186.112.90 - - [21/Aug/2026:02:39:32 -0400] "GET / HTTP/1.1" 200 20 "http://lewaf.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 157.230.83.140 - - [21/Aug/2026:02:55:08 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:03:00:45 -0400] "POST /wp-cron.php?doing_wp_cron=1787295645.6829330921173095703125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 54.187.56.142 - - [21/Aug/2026:03:00:44 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:03:29:21 -0400] "POST /wp-cron.php?doing_wp_cron=1787297361.4112510681152343750000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.130.3.120 - - [21/Aug/2026:03:29:20 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [21/Aug/2026:03:32:02 -0400] "POST /wp-cron.php?doing_wp_cron=1787297522.3017430305480957031250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:03:32:00 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=1889ffe3c2 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [21/Aug/2026:04:30:50 -0400] "POST /wp-cron.php?doing_wp_cron=1787301050.6669158935546875000000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 107.150.80.63 - - [21/Aug/2026:04:30:49 -0400] "GET /wp-login.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" 69.39.225.240 - - [21/Aug/2026:04:44:17 -0400] "POST /wp-cron.php?doing_wp_cron=1787301857.7190980911254882812500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.157.38.228 - - [21/Aug/2026:04:44:16 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 198.235.24.181 - - [21/Aug/2026:05:42:12 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 35.252.200.186 - - [21/Aug/2026:05:57:36 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:06:18:00 -0400] "POST /wp-cron.php?doing_wp_cron=1787307480.4219899177551269531250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 150.5.132.68 - - [21/Aug/2026:06:17:59 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:06:29:59 -0400] "POST /wp-cron.php?doing_wp_cron=1787308199.0167660713195800781250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:06:29:58 -0400] "GET /cart/?remove_item=64b6b3b6340ffb40931058f9d484356c&_wpnonce=8559ffbae8 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [21/Aug/2026:06:30:03 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=b269e13778 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [21/Aug/2026:06:47:19 -0400] "POST /wp-cron.php?doing_wp_cron=1787309239.3701679706573486328125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.39 - - [21/Aug/2026:06:47:18 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.39 - - [21/Aug/2026:06:47:21 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 20.40.208.6 - - [21/Aug/2026:06:56:53 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [21/Aug/2026:06:56:54 -0400] "POST /wp-cron.php?doing_wp_cron=1787309814.0322980880737304687500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.40.208.6 - - [21/Aug/2026:06:56:53 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 138022 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:54 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:54 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:54 -0400] "GET /wp-content/themes/astra/inc/ki1k.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:54 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:54 -0400] "GET /wp-the.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:54 -0400] "GET /leaf.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:55 -0400] "GET //wp.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:55 -0400] "GET /wp.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:56 -0400] "GET /berlin.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:57 -0400] "GET /wp-includes/Text/wp-conflg.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:57 -0400] "GET /wp-block.php HTTP/1.1" 200 137988 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:57 -0400] "GET /readme.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:58 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:58 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:58 -0400] "GET //xxx.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:59 -0400] "GET /xxx.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:56:59 -0400] "GET /wp-login.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:02 -0400] "GET /new.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:02 -0400] "GET /classwithtostring.php HTTP/1.1" 200 138006 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:03 -0400] "GET /wp-slss.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:04 -0400] "GET /x.php HTTP/1.1" 200 137974 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:04 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:04 -0400] "GET /wp-content/about.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:04 -0400] "GET /wefile.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:05 -0400] "GET /yanz.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:05 -0400] "GET /makeasmtp.php HTTP/1.1" 200 137990 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:06 -0400] "GET /wp-admin/network/admin.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:08 -0400] "GET /file.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:09 -0400] "GET /wp-content/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:09 -0400] "GET /666.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:09 -0400] "GET /info.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:10 -0400] "GET /min.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:10 -0400] "GET /wp-admin/function.php HTTP/1.1" 200 138006 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:11 -0400] "GET /ok.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:11 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 138018 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:12 -0400] "GET /wp-includes/customize/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:12 -0400] "GET /index/function.php HTTP/1.1" 200 138000 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:13 -0400] "GET //wp-file.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:13 -0400] "GET /wp-file.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:14 -0400] "GET /miru1.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:14 -0400] "GET //shell.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:15 -0400] "GET /shell.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:15 -0400] "GET /simple.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:16 -0400] "GET /wp-xx.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:16 -0400] "GET /wp-2019.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:17 -0400] "GET /wp-conflg.php HTTP/1.1" 200 137990 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:18 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 200 138016 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:18 -0400] "GET /sitemap.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:19 -0400] "GET /jlex.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:19 -0400] "GET /cx.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:20 -0400] "GET /index.php0 HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:21 -0400] "GET /kk.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:21 -0400] "GET /aaa.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:22 -0400] "GET /wp-includes/rest-api/fields/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:22 -0400] "GET //w3lls.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:22 -0400] "GET /w3lls.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:23 -0400] "GET /noe.php HTTP/1.1" 200 137978 "-" "-" 69.39.225.240 - - [21/Aug/2026:06:57:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787309844.1721050739288330078125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.40.208.6 - - [21/Aug/2026:06:57:23 -0400] "GET /wp-admin/js/wp-conflg.php HTTP/1.1" 200 138014 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:24 -0400] "GET /gk.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:24 -0400] "GET /xper1.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:25 -0400] "GET /drykl.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:25 -0400] "GET /ccou.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:26 -0400] "GET /wmore1.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:27 -0400] "GET /GA13.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:28 -0400] "GET /ma1.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:29 -0400] "GET /wp-content/packed.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:29 -0400] "GET /wp-admin/images/wp-login.php HTTP/1.1" 200 138020 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:29 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:29 -0400] "GET /wp-admin/images/ HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:30 -0400] "GET /link.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:30 -0400] "GET /xex.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:31 -0400] "GET //ops.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:31 -0400] "GET /ops.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:32 -0400] "GET /qlex1.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:32 -0400] "GET /k.php HTTP/1.1" 200 137974 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:33 -0400] "GET /wp-blog-header.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:33 -0400] "GET /wp-links.php HTTP/1.1" 200 137988 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:34 -0400] "GET /byp.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:34 -0400] "GET /buds1.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:35 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:35 -0400] "GET /wp.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:35 -0400] "GET /file5.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:36 -0400] "GET //wp-includes/l10n/themes.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:36 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 138008 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:36 -0400] "GET /as.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:37 -0400] "GET /wp-content/plugins/seoplugins/mar.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:37 -0400] "GET /csa.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:38 -0400] "GET /wp-includes/css/wp-conflg.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:38 -0400] "GET /403.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:38 -0400] "GET /wp-content/config.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:38 -0400] "GET /b.php HTTP/1.1" 200 137974 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:39 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:39 -0400] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:39 -0400] "GET /jok3r.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:40 -0400] "GET /themes.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:40 -0400] "GET /images/404.php HTTP/1.1" 200 137992 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:41 -0400] "GET /file1.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:41 -0400] "GET /doc.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:42 -0400] "GET /2x.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:42 -0400] "GET /wplogbak.php HTTP/1.1" 200 137988 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:43 -0400] "GET /test.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:44 -0400] "GET /p-blog.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:44 -0400] "GET /geforce.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:45 -0400] "GET /config.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:45 -0400] "GET /wp-content/themes/cay-van-phong/filemanager.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:45 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:45 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:45 -0400] "GET /bless24.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:46 -0400] "GET /sta.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:46 -0400] "GET /wp-content/themes/twenty/twenty.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:46 -0400] "GET /wp-includes/wp-class.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:46 -0400] "GET /assets/images/doc.php HTTP/1.1" 200 138006 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:47 -0400] "GET /sql.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:47 -0400] "GET /sg.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:48 -0400] "GET /shell20211028.php HTTP/1.1" 200 137998 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:49 -0400] "GET /packed.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:49 -0400] "GET /ms.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:50 -0400] "GET /wp-content/upgrade-temp-backup/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:50 -0400] "GET /wp-content/themes/aahana/json.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:50 -0400] "GET /wp-admin/includes/install.php HTTP/1.1" 200 138022 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:50 -0400] "GET /wp-includes/pomo/install.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [21/Aug/2026:06:57:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787309871.3211390972137451171875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.40.208.6 - - [21/Aug/2026:06:57:50 -0400] "GET /f22.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:51 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:51 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:51 -0400] "GET /1.php HTTP/1.1" 200 137974 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:51 -0400] "GET /wp-content/uploads/wp-conflg.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:52 -0400] "GET /wander.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:52 -0400] "GET /wp-includes/SimplePie/wp-conflg.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:52 -0400] "GET /wp-access.php HTTP/1.1" 200 137990 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:53 -0400] "GET /wp-content/file.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:53 -0400] "GET /buy.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:53 -0400] "GET /wp-sing.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:54 -0400] "GET /chosen.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:54 -0400] "GET /wp-includes/block-supports/autoload_classmap.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [21/Aug/2026:06:57:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787309875.3930280208587646484375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.40.208.6 - - [21/Aug/2026:06:57:54 -0400] "GET /t.php HTTP/1.1" 200 137974 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:55 -0400] "GET /manage.php HTTP/1.1" 200 137984 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:56 -0400] "GET /011i.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:56 -0400] "GET /txets.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:57 -0400] "GET /wp-includes/images/wlw/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:57 -0400] "GET /wp-admin/network/shell.php HTTP/1.1" 200 138016 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:57 -0400] "GET //item.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:58 -0400] "GET /item.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:58 -0400] "GET /vxrl.php HTTP/1.1" 200 137980 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:59 -0400] "GET /wp-admin/chosen.php HTTP/1.1" 200 138002 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:59 -0400] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:57:59 -0400] "GET /about/function.php HTTP/1.1" 200 138000 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:00 -0400] "GET /xxx.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:00 -0400] "GET /db.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:01 -0400] "GET /xda.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:02 -0400] "GET /jj.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:03 -0400] "GET /wp-admin/css/colors/blue/index.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:03 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:03 -0400] "GET /wp-content/uploads/2024/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:03 -0400] "GET /wp-includes/images/smilies/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:03 -0400] "GET /bs1.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:04 -0400] "GET /gg.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:05 -0400] "GET /wp-admin/includes/wp-conflg.php HTTP/1.1" 200 138026 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:05 -0400] "GET /zolando.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:06 -0400] "GET /ty.php HTTP/1.1" 200 137976 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:07 -0400] "GET /wp-content/plugins/dummyyummy/wp-signup.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:07 -0400] "GET /667.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:07 -0400] "GET /wp-admin/user/chosen.php HTTP/1.1" 200 138012 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:08 -0400] "GET /file-manager-advanced.php HTTP/1.1" 200 138014 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:09 -0400] "GET /fe5.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:09 -0400] "GET /ups.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:10 -0400] "GET /dropdown.php HTTP/1.1" 200 137988 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /wp-includes/block-patterns/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /wp-admin/js/ HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /wp-includes/autoload_classmap.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /wp-content/plugins/seoplugins/index.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /wp-includes/sodium_compat/src/Core32/Curve25519/Ge/about.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:11 -0400] "GET /file6.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:12 -0400] "GET /default.php HTTP/1.1" 200 137986 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:12 -0400] "GET /wp-includes/html-api/wp-conflg.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:12 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:12 -0400] "GET /wp-content/plugins/wp-login.php HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:12 -0400] "GET /wp-admin/network/about.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:15 -0400] "GET /admin/function.php HTTP/1.1" 200 138000 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:16 -0400] "GET /bthil.php HTTP/1.1" 200 137982 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:16 -0400] "GET /ops.php HTTP/1.1" 200 137978 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:17 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:17 -0400] "GET /wp-admin/includes/ HTTP/1.1" 403 199 "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:17 -0400] "GET /css/index.php HTTP/1.1" 200 - "-" "-" 20.40.208.6 - - [21/Aug/2026:06:58:18 -0400] "GET /css/ HTTP/1.1" 200 137972 "-" "-" 69.39.225.240 - - [21/Aug/2026:07:02:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787310158.2042779922485351562500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 40.88.21.235 - - [21/Aug/2026:07:02:37 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 69.39.225.240 - - [21/Aug/2026:07:10:15 -0400] "POST /wp-cron.php?doing_wp_cron=1787310615.6272048950195312500000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:07:10:15 -0400] "GET /strawberry-tart/feed/ HTTP/1.1" 200 735 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [21/Aug/2026:07:19:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787311148.4581539630889892578125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.65.236.109 - - [21/Aug/2026:07:19:07 -0400] "GET /sftp-config.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.109 - - [21/Aug/2026:07:19:09 -0400] "GET /sftp-config.json HTTP/1.1" 200 28505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.109 - - [21/Aug/2026:07:19:10 -0400] "GET /.vscode/sftp.json HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 103.65.236.109 - - [21/Aug/2026:07:19:11 -0400] "GET /.vscode/sftp.json HTTP/1.1" 200 28506 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0" 69.39.225.240 - - [21/Aug/2026:08:21:48 -0400] "POST /wp-cron.php?doing_wp_cron=1787314908.7062890529632568359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.157.46.118 - - [21/Aug/2026:08:21:48 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 85.203.23.125 - - [21/Aug/2026:08:27:57 -0400] "GET /3PJcpMFsD8B.php HTTP/1.1" 200 28453 "-" "Go-http-client/1.1" 85.203.23.125 - - [21/Aug/2026:08:27:58 -0400] "GET /admin.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.125 - - [21/Aug/2026:08:27:59 -0400] "GET /goods.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.125 - - [21/Aug/2026:08:28:00 -0400] "GET /edit-tags.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.125 - - [21/Aug/2026:08:28:01 -0400] "GET /filemanager.php HTTP/1.1" 200 28452 "-" "Go-http-client/1.1" 85.203.23.125 - - [21/Aug/2026:08:28:02 -0400] "GET /wp-content/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.125 - - [21/Aug/2026:08:28:03 -0400] "GET /wp-config-sample.php HTTP/1.1" 200 1022 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:08 -0400] "GET /wp-admin/images/admin.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:09 -0400] "GET /wp-content/uploads/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:09 -0400] "GET /item.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:10 -0400] "GET /adminfuns.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:11 -0400] "GET /wpx/ HTTP/1.1" 200 28441 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:12 -0400] "GET /files.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:13 -0400] "GET /wp-content/themes/news-portal/zdata.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:13 -0400] "GET /wp-includes/css/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:13 -0400] "GET /classwithtostring.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:14 -0400] "GET /wp-admin/css/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:14 -0400] "GET /wp-content/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:14 -0400] "GET /fm.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:15 -0400] "GET /wp-admin/ HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:20 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:28:21 -0400] "POST /wp-cron.php?doing_wp_cron=1787315301.6171751022338867187500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.116 - - [21/Aug/2026:08:28:20 -0400] "GET /222.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:22 -0400] "GET /aaa.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:23 -0400] "GET /wp-admin/css/admin.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:28:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787315304.5248401165008544921875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.116 - - [21/Aug/2026:08:28:24 -0400] "GET /inputs.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:24 -0400] "GET /about.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:25 -0400] "GET /wp-includes/speculative8.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:25 -0400] "GET /radio.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:26 -0400] "GET /wp-admin/js/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:27 -0400] "GET /wp-content/updates.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:27 -0400] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:27 -0400] "GET /wp-includes/theme-compat/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:27 -0400] "GET /wp-content/themes/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:27 -0400] "GET /wp-content/languages/plugins/ HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:28 -0400] "GET /ioxi-o.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:29 -0400] "GET /wp-includes/IXR/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:29 -0400] "GET /404.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:31 -0400] "GET /mah.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:32 -0400] "GET /wp-content/plugins/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:32 -0400] "GET /wp.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:33 -0400] "GET /wp-content/plugins/hello-plus/classes/ehp-sarang.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:33 -0400] "GET /wp-content/themes/twentytwentyone/content-index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:33 -0400] "GET /wp-includes/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:33 -0400] "GET /wp-content/themes/404.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:34 -0400] "GET /file.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:35 -0400] "GET /wp-content/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:35 -0400] "GET /wp-includes/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:35 -0400] "GET /1.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:36 -0400] "GET /wp-content/themes/fukasawa/inc/classes/403.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:36 -0400] "GET /wp-content/themes/alera/gecko.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:36 -0400] "GET /wp-content/plugins/so-pinyin-slugs/inc/main_json.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:36 -0400] "GET /wp-includes/assets/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:37 -0400] "GET /wp-content/plugins/hello.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:37 -0400] "GET /wp-admin/maint/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:37 -0400] "GET /wordpress/wp-admin/maint/ HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:38 -0400] "GET /wp-content/uploads/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:38 -0400] "GET /wp-content/plugins/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:38 -0400] "GET /edit.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:39 -0400] "GET /wp-includes/blocks/archives/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:39 -0400] "GET /wp-admin/includes/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:40 -0400] "GET /x.php HTTP/1.1" 200 28441 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:40 -0400] "GET /wp-content/themes/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:41 -0400] "GET /wp-admin/css/colors/light/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:41 -0400] "GET /wp-admin.php HTTP/1.1" 200 28441 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:42 -0400] "GET /wa/ HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:28:47 -0400] "GET /wp-file.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:03 -0400] "GET /wp-content/upgrade/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:03 -0400] "GET /wp-content/edit-tags.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:03 -0400] "GET /log.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:29:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787315345.3374900817871093750000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.149 - - [21/Aug/2026:08:29:04 -0400] "GET /bless.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:05 -0400] "GET /wp-includes/Text/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:05 -0400] "GET /wp-content/languages/themes/ HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:07 -0400] "GET /wp-content/plugins/file-upload-types/assets/css/403.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:07 -0400] "GET /wp-content/plugins/autoload_classmap.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:07 -0400] "GET /bolt.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:08 -0400] "GET /wp-admin/maint/chosen.php HTTP/1.1" 200 28452 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:09 -0400] "GET /xmlrpc.php HTTP/1.1" 200 60 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:09 -0400] "GET /worksec.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:10 -0400] "GET /wp-content.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:11 -0400] "GET /wp-includes/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:11 -0400] "GET /wp-includes/js/tinymce/themes/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:12 -0400] "GET /wp-content/plugins/ssss/src.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:12 -0400] "GET /wp-includes/css/dist/components/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:12 -0400] "GET /files/ HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:13 -0400] "GET /wp-includes/themes.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:13 -0400] "GET /ahax.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:14 -0400] "GET /wp-admin/images/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:14 -0400] "GET /wp-includes/blocks/preformatted/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:14 -0400] "GET /wp-admin/css/colors/coffee/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:14 -0400] "GET /wp-includes/customize/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:15 -0400] "GET /wp-includes/classwithtostring.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:15 -0400] "GET /wp-includes/blocks/gallery/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:15 -0400] "GET /wp-admin/js/widgets/images/ HTTP/1.1" 200 28452 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:16 -0400] "GET /wp-includes/js/imgareaselect/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:16 -0400] "GET /wp-includes/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:16 -0400] "GET /wp-content/plugins/shell/ HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:17 -0400] "GET /mini.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:18 -0400] "GET /admin/function.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:19 -0400] "GET /wp-content/uploads/config.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:19 -0400] "GET /m.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:20 -0400] "GET /wp-content/languages/ HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:21 -0400] "GET /wp-content/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:21 -0400] "GET /wp-content/packed.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:22 -0400] "GET /wp-content/themes/twentytwentyfive/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:22 -0400] "GET /wp-content/plugins/enhanced-text-widget/analyst/src/403x.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:22 -0400] "GET /wp-admin/user/upgrade/ HTTP/1.1" 200 28453 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:23 -0400] "GET /wp-includes/Text/Diff/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:23 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/ChaCha20/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:29:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787315364.1292901039123535156250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.149 - - [21/Aug/2026:08:29:23 -0400] "GET /we.php HTTP/1.1" 200 28441 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:24 -0400] "GET /wp-content/themes/neve/assets/apps/dashboard/build/ HTTP/1.1" 200 28465 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:25 -0400] "GET /wp-includes/css/dist/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:25 -0400] "GET /wp-includes/blocks/media-text/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:25 -0400] "GET /wp-includes/Text/Diff/Renderer/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:26 -0400] "GET /wp-includes/rest-api/fields/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:26 -0400] "GET /wp-content/themes/twentynineteen/sass/site/ HTTP/1.1" 200 28464 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:27 -0400] "GET /wp-content/themes/fukasawa/inc/classes/403x.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:27 -0400] "GET /wp-content/plugins/filester/assets/css/404.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:27 -0400] "GET /wp-admin/wp-conflg.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:28 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:28 -0400] "GET /wp-admin/maint/includes/ HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:29 -0400] "GET /wp-includes/blocks/comment-date/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:29 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:29 -0400] "GET /wp-includes/widgets/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:30 -0400] "GET /wp-content/themes/theme-check/main.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:30 -0400] "GET /css.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:31 -0400] "GET /wp-includes/blocks/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:31 -0400] "GET /wp-content/uploads/2025/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:31 -0400] "GET /wp-includes/blocks/comment-content/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:31 -0400] "GET /wp-includes/images/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:31 -0400] "GET /wp-content/options.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:32 -0400] "GET /wp-content/themes/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:32 -0400] "GET /wp-admin/images/as.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:33 -0400] "GET /wp-security.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:34 -0400] "GET /system.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:35 -0400] "GET /wp-includes/header.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:35 -0400] "GET /wp-includes/fonts/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:35 -0400] "GET /wp-admin/css/colors/ocean/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:35 -0400] "GET /a.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:36 -0400] "GET /wp-content/themes/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:36 -0400] "GET /wp-includes/Requests/src/Exception/Transport/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:37 -0400] "GET /wp-admin/network/ HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:42 -0400] "GET /wp-content/uploads/profile.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:42 -0400] "GET /wp-includes/js/tinymce/utils/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:42 -0400] "GET /wp-includes/block-patterns/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:42 -0400] "GET /wp-content/themes/twentytwentythree/patterns/template-singl-portfolio.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:42 -0400] "GET /wp-includes/certificates/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:43 -0400] "GET /wp-admin/includes/user/ HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:43 -0400] "GET /66.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:44 -0400] "GET /wp-content/languages/autoload_classmap.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:45 -0400] "GET /wp-content/uploads/2024/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:45 -0400] "GET /wp-includes/blocks/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:45 -0400] "GET /wp-includes/footer.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:45 -0400] "GET /wp-content/uploads/wp-file-manager-pro/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:45 -0400] "GET /system_log.php HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:46 -0400] "GET /wp-includes/blocks/separator/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:47 -0400] "GET /mah/function.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:47 -0400] "GET /wp-content/languages/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:48 -0400] "GET /wp-includes/blocks/spacer/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:48 -0400] "GET /wp-includes/certificates/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:48 -0400] "GET /wp-includes/blocks/shortcode/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:48 -0400] "GET /wp-content/edit-wolf.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:48 -0400] "GET /wp-content/uploads/2021/10/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:49 -0400] "GET /wp-includes/widgets/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:49 -0400] "GET /wp-includes/js/tinymce/themes/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:49 -0400] "GET /wp-includes/blocks/social-link/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:49 -0400] "GET /wp-good.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:29:50 -0400] "GET /wp-content/uploads/elementor/css/ HTTP/1.1" 200 28453 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:01 -0400] "GET /wp-includes/theme-compat/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:01 -0400] "GET /root.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:03 -0400] "GET /wp-includes/widgets/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:03 -0400] "GET /wp-admin/class.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:04 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:04 -0400] "GET /wp-content/themes/news-portal/admins-dir.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:04 -0400] "GET /wp-admin/js/chosen.php HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:05 -0400] "GET /wp-content/uploads/classwithtostring.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:05 -0400] "GET /wp-content/themes/twentytwentytwo/templates/ HTTP/1.1" 200 1823 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:06 -0400] "GET /wp-includes/Requests/src/Utility/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:06 -0400] "GET /wp-includes/sodium_compat/src/Core/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:06 -0400] "GET /wp-content/lock360.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:06 -0400] "GET /wp-includes/fonts/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:06 -0400] "GET /wp-content/themes/twentytwentythree/patterns/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:06 -0400] "GET /wp-admin/js/widgets/admin.php HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:07 -0400] "GET /wp-includes/js/dist/vendor/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:08 -0400] "GET /wp-includes/blocks/footnotes/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:08 -0400] "GET /wp-includes/blocks/pullquote/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:08 -0400] "GET /simple.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.149 - - [21/Aug/2026:08:30:09 -0400] "GET /wp-admin/includes/admin.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:40 -0400] "GET /wp-includes/blocks/comments-pagination-numbers/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:40 -0400] "GET /wp-includes/blocks/post-featured-image/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:40 -0400] "GET /wp-content/uploads/wc-logs/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:40 -0400] "GET /wp-content/uploads/upload.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:31:41 -0400] "POST /wp-cron.php?doing_wp_cron=1787315501.6654291152954101562500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.135 - - [21/Aug/2026:08:31:40 -0400] "GET /wp-admin/maint/network/ HTTP/1.1" 200 28450 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:42 -0400] "GET /wp-includes/blocks/group/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:42 -0400] "GET /wp-includes/js/tinymce/skins/lightgray/img/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:42 -0400] "GET /666.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:43 -0400] "GET /wp-includes/sodium_compat/namespaced/Core/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:43 -0400] "GET /wp-includes/l10n/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:43 -0400] "GET /user.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:44 -0400] "GET /wp-includes/blocks/nextpage/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:44 -0400] "GET /wp-includes/blocks/code/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:45 -0400] "GET /wp-content/themes/twentytwentytwo/assets/fonts/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:45 -0400] "GET /t.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:46 -0400] "GET /wp-includes/html-api/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:46 -0400] "GET /wp-includes/css/dist/edit-post/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:46 -0400] "GET /wp-content/plugins/plugin/ HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:47 -0400] "GET /wp-includes/js/tinymce/langs/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:47 -0400] "GET /wp-includes/blocks/query-pagination-previous/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:47 -0400] "GET /wp-includes/Requests/src/Auth/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:48 -0400] "GET /wp-content/uploads/wp.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:48 -0400] "GET /wp-content/themes/news-portal/sitebar.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:48 -0400] "GET /database.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:49 -0400] "GET /wp-includes/login.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:49 -0400] "GET /wp-admin/user/config.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:50 -0400] "GET /wp-content/languages/themes/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:50 -0400] "GET /wp-includes/PHPMailer/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:50 -0400] "GET /wp-content/plugins/wp-file-manager/file_folder_manager.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:51 -0400] "GET /wp-admin/classwithtostring.php HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:52 -0400] "GET /wp-admin/about.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:57 -0400] "GET /wp-includes/sitemaps/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:57 -0400] "GET /wp-admin/js/widgets/maint/ HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:58 -0400] "GET /wp-content/languages/classwithtostring.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:58 -0400] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:58 -0400] "GET /wp-admin/css/colors/modern/test2.php HTTP/1.1" 200 28455 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:59 -0400] "GET /wp-content/themes/twentytwentyfive/parts/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:59 -0400] "GET /wp-includes/blocks/query-title/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:59 -0400] "GET /wp-content/plugins/config.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:31:59 -0400] "GET /images/ HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:00 -0400] "GET /wp-content/themes/index-string.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:01 -0400] "GET /wp-admin/includes/images/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:01 -0400] "GET /wp-admin/includes/images/ HTTP/1.1" 200 28453 "http://www.lewaf.com/wp-admin/includes/images/index.php" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:02 -0400] "GET /wp-admin/includes/update-core-time.php HTTP/1.1" 200 28456 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:03 -0400] "GET /wp-includes/woocommerce-call.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:03 -0400] "GET /wp-admin/user/upgrade/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:04 -0400] "GET /wp-admin/user/upgrade/ HTTP/1.1" 200 28461 "http://www.lewaf.com/wp-admin/user/upgrade/index.php" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:05 -0400] "GET /wp-admin/maint/css/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:06 -0400] "GET /wp-admin/maint/css/ HTTP/1.1" 200 28458 "http://www.lewaf.com/wp-admin/maint/css/index.php" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:07 -0400] "GET /wp-includes/blocks/pattern/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:07 -0400] "GET /wp-content/upgrade-temp-backup/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:07 -0400] "GET /wp-content/plugins/elementor/includes/template-library/classes/view.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:08 -0400] "GET /wp-admin/network/theme-install-function.php HTTP/1.1" 200 28456 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:09 -0400] "GET /wp-content/shadow-bot.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:09 -0400] "GET /wp-includes/blocks/shadow-bot.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:09 -0400] "GET /wp-admin/load.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:10 -0400] "GET /wp-admin/wp-activate.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:11 -0400] "GET /wp-admin/module.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:12 -0400] "GET /wp-content/themes/wp-links-opml.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:12 -0400] "GET /wp-content/themes/system.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:12 -0400] "GET /wp-content/wp-links-opml.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:12 -0400] "GET /wp-content/ms-files.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:12 -0400] "GET /wp-content/plugin-install.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:13 -0400] "GET /wp-admin/includes/class-walker-nav-menu-edit-interpreter.php HTTP/1.1" 200 28468 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:14 -0400] "GET /wp-includes/customize/class-wp-widget-area-customize-control-interpreter.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:14 -0400] "GET /wp-includes/ai-client/adapters/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:14 -0400] "GET /wp-includes/blocks/widget-group/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:14 -0400] "GET /wp-includes/blocks/preformatted/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:14 -0400] "GET /wp-includes/blocks/list/list/wp-config.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:15 -0400] "GET /wp-includes/blocks/post-author-biography/post-author-biography/class-wp-http.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:15 -0400] "GET /wp-includes/blocks/post-time-to-read/post-time-to-read/post-template.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:15 -0400] "GET /wp-includes/blocks/post-template/post-template/api-gateway.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:15 -0400] "GET /wp-includes/customize/network/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:15 -0400] "GET /wp-includes/widgets/theme-compat/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:16 -0400] "GET /wp-content/upgrade/patterns/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:16 -0400] "GET /wp-admin/images/widgets/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:16 -0400] "GET /wp-admin/images/widgets/ HTTP/1.1" 200 28457 "http://www.lewaf.com/wp-admin/images/widgets/index.php" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:17 -0400] "GET /wp-includes/customize/includes/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:18 -0400] "GET /wp-admin/css/colors/upgrade/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:18 -0400] "GET /wp-admin/css/colors/upgrade/ HTTP/1.1" 200 28464 "http://www.lewaf.com/wp-admin/css/colors/upgrade/index.php" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:19 -0400] "GET /wp-content/themes/news-portal/user-install.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:19 -0400] "GET /wp-includes/blocks/missing/missing/theme-single.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:19 -0400] "GET /wp-admin/admin-header-string.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:20 -0400] "GET /wp-includes/fonts-long.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:20 -0400] "GET /wp-content/plugins/wp-config/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:21 -0400] "GET /wp-content/themes/cyber-security-blocks/parts/parts/user-edit.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:21 -0400] "GET /shadow-bot.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:22 -0400] "GET /wp-includes/blocks/html/html/dark-mode.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:22 -0400] "GET /wp-admin/includes/menu-beta.php HTTP/1.1" 200 28455 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:23 -0400] "GET /wp-includes/block-bindings/lib/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:23 -0400] "GET /wp-admin/network/theme-install-table.php HTTP/1.1" 200 28455 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:32:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787315544.8762760162353515625000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.135 - - [21/Aug/2026:08:32:24 -0400] "GET /wp-admin/css/chosen.php HTTP/1.1" 200 28452 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:25 -0400] "GET /wp-includes/SimplePie/src/Content/autoload_classmap.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:25 -0400] "GET /wp-includes/IXR/shadow-bot.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:25 -0400] "GET /wp-includes/js/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:25 -0400] "GET /wp-content/plugins/prenota/gecko.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:26 -0400] "GET /wp-includes/css/as.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:26 -0400] "GET /wp-includes/blocks/home-link/wp-login.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:26 -0400] "GET /wp-content/plugins/fix/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:26 -0400] "GET /wp-content/plugins/fix/ioxi-o.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:32:26 -0400] "GET /wp-content/ioxi-o.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:32 -0400] "GET /wp-matcha1.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:33 -0400] "GET /wp-content/themes/twentytwenty/assets/js/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:33 -0400] "GET /wp-content/plugins/dlex/dlex.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:33 -0400] "GET /wp-content/plugins/view-source/ioxi-o.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:33 -0400] "GET /wp-admin/network/cache/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:34 -0400] "GET /wp-admin/network/cache/ HTTP/1.1" 200 28462 "http://www.lewaf.com/wp-admin/network/cache/index.php" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:35 -0400] "GET /wp-includes/blocks/table/table/updater-tool.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:35 -0400] "GET /wp-admin/css/maintenance.php HTTP/1.1" 200 28454 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:36 -0400] "GET /wp-includes/js/admin.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:36 -0400] "GET /wp-includes/home.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:36 -0400] "GET /wp-content/themes/oceanwp/content-index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:37 -0400] "GET /wp-content/themes/Divi/content-index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:37 -0400] "GET /wp-content/themes/exnova/content-index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:37 -0400] "GET /wp-content/themes/specia/content-index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:37 -0400] "GET /wp-content/plugins/wordpress-seo/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:37 -0400] "GET /wp-includes/css/eroor.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:38 -0400] "GET /wp-content/languages/themes/home.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:38 -0400] "GET /wp-content/languages/plugins/options.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:38 -0400] "GET /wp-includes/js/tinymce/themes/panel.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:38 -0400] "GET /wp-includes/Requests/Response/Response/multisite-setup.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:38 -0400] "GET /wp-content/plugins/data.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:39 -0400] "GET /wp-includes/js/crop/crop/sitemap-generator.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:39 -0400] "GET /wp-includes/Requests/Transport/Transport/spam-filter.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:39 -0400] "GET /wp-content/themes/db-status.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:39 -0400] "GET /wp-includes/SimplePie/XML/XML/sitemap-generator.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:39 -0400] "GET /wp-content/uploads/test.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:39 -0400] "GET /wp-includes/js/jquery/ui/ui/forum-engine.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:40 -0400] "GET /wp-includes/js/tinymce/plugins/ms-files.php HTTP/1.1" 200 28455 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:41 -0400] "GET /wp-admin/includes/includes/logo/se.php HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:41 -0400] "GET /wp-includes/widgets/shadow-bot.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:42 -0400] "GET /wp-content/uploads/login.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:42 -0400] "GET /wp-content/uploads/well-known/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:42 -0400] "GET /wp-content/uploads/backup.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:42 -0400] "GET /wp-admin/user/freedoms-old.php HTTP/1.1" 200 28457 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:43 -0400] "GET /wp-includes/blocks/post-author-name-path.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:43 -0400] "GET /wp-includes/class-wp-error-character.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:44 -0400] "GET /wp-cron-element.php HTTP/1.1" 200 28450 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:44 -0400] "GET /wp-includes/sitemaps/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:45 -0400] "GET /antiperfo.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:46 -0400] "GET /wp-content/themes/blog-stream/inc/upgrade-to-pro/section-pro.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:46 -0400] "GET /wp-content/uploads/fusion-styles/user/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:46 -0400] "GET /wp-content/themes/twentytwentyfive/parts/upgrade/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:46 -0400] "GET /wp-admin/network/theme-install-variable.php HTTP/1.1" 200 28457 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:48 -0400] "GET /wp-content/themes/twentynineteen/sass/site/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:48 -0400] "GET /wp-content/themes/twentytwentyone/assets/sass/05-blocks/preformatted/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:48 -0400] "GET /wp-content/plugins/elex/elex.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:48 -0400] "GET /wp-content/themes/oceanwp/sass/base/1.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:49 -0400] "GET /wp-content/themes/twentytwentyone/emerance.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:49 -0400] "GET /wp-content/themes/twentynineteen/content-index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:49 -0400] "GET /wp-content/plugins/responsive-lightbox/assets/nivo/themes/wp-load.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:49 -0400] "GET /wp-content/plugins/responsive-lightbox/assets/jstree/themes/system.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:49 -0400] "GET /wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/data.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:50 -0400] "GET /wp-content/themes/windazo/inc/plugins/wp-blog-header.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:50 -0400] "GET /wp-content/plugins/js_composer/include/classes/vendors/plugins/api.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:50 -0400] "GET /wp-content/themes/stockholm/woocommerce/single-product/add-to-cart/internal.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:50 -0400] "GET /wp-includes/blocks/post-template/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:32:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787315571.1764750480651855468750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.116 - - [21/Aug/2026:08:32:50 -0400] "GET /wp-admin/images/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:51 -0400] "GET /wp-admin/images/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/images/index.php" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:51 -0400] "GET /wp-includes/css/dist/block-directory/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:51 -0400] "GET /wp-includes/assets/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:51 -0400] "GET /wp-includes/IXR/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:52 -0400] "GET /wp-includes/css/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:52 -0400] "GET /wp-content/themes/theme-check/theme-check.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:52 -0400] "GET /wp-admin/css/wp-conflg.php HTTP/1.1" 200 28450 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:53 -0400] "GET /function/function.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:54 -0400] "GET /wp-content/uploads/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:55 -0400] "GET /wp-admin/network/upgrade/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:55 -0400] "GET /wp-admin/network/upgrade/ HTTP/1.1" 200 28464 "http://www.lewaf.com/wp-admin/network/upgrade/index.php" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:56 -0400] "GET /wp-includes/style-engine/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:56 -0400] "GET /wp-admin/js/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:57 -0400] "GET /wp-admin/js/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/js/index.php" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:57 -0400] "GET /wp-admin/css/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:58 -0400] "GET /wp-admin/css/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/css/index.php" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:58 -0400] "GET /wp-admin/network/chosen.php HTTP/1.1" 200 28453 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:32:59 -0400] "GET /wp-admin/network/autoload_classmap.php HTTP/1.1" 200 28459 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:00 -0400] "GET /wp-content/themes/news-portal/fm.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:00 -0400] "GET /wp-includes/customize/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:00 -0400] "GET /wp-admin/css/colors/admin.php HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:01 -0400] "GET /wp-includes/images/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:01 -0400] "GET /wp-includes/Text/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:01 -0400] "GET /chosen.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:02 -0400] "GET /wp-content/system.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:03 -0400] "GET /wp-includes/PHPMailer/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:03 -0400] "GET /wp-content/themes/news-portal/wp-admins.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:03 -0400] "GET /wp-includes/images/chosen.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:03 -0400] "GET /wp-admin/css.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:04 -0400] "GET /wp-content/plugins/pwnd/pwnd.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:04 -0400] "GET /wp-content/plugins/advanced-product-fields-for-woocommerce/db.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:04 -0400] "GET /wp-admin/wp.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:05 -0400] "GET /tinyfilemanager.php HTTP/1.1" 200 28454 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:06 -0400] "GET /wp-content/plugins/fix/up.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:06 -0400] "GET /Simple.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:07 -0400] "GET /wp-content/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:08 -0400] "GET /storage/framework/views/shell.php HTTP/1.1" 200 28461 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:08 -0400] "GET /tinyfilemanager/tinyfilemanager.php HTTP/1.1" 200 28456 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:09 -0400] "GET /shell.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:10 -0400] "GET /wp-content/plugins/aatdgetgdg/main.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:10 -0400] "GET /asasx.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:11 -0400] "GET /wp-includes/template-wploader.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:12 -0400] "GET /test.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.116 - - [21/Aug/2026:08:33:13 -0400] "GET /wp-admin/network/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:23 -0400] "GET /upload/ HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:33:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787315604.6509349346160888671875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.150 - - [21/Aug/2026:08:33:24 -0400] "GET /css/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:24 -0400] "GET /css/ HTTP/1.1" 200 28452 "http://www.lewaf.com/css/index.php" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:26 -0400] "GET /wp-admin/network/cache/ HTTP/1.1" 200 28451 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:26 -0400] "GET /abcd.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:27 -0400] "GET /wp-content/themes/twentytwentyfour/patterns/template-singl-portfolio.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:28 -0400] "GET /wp-includes/class-wp-smtp-bar.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:28 -0400] "GET /assets/images/selam.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:29 -0400] "GET /manager.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:30 -0400] "GET /upload.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:31 -0400] "GET /.well-known/gecko-litespeed.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:31 -0400] "GET /buy.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:32 -0400] "GET /wp-content/plugins/zgbrarc/cong.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:32 -0400] "GET /autoload_classmap.php HTTP/1.1" 200 28452 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:33 -0400] "GET /wp-includes/customize/wp-conflg.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:33 -0400] "GET /themes.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:34 -0400] "GET /wp-admin/fmadmin.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:35 -0400] "GET /class.api.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:36 -0400] "GET /wp-includes/ID3/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:36 -0400] "GET /wp-admin/includes/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:37 -0400] "GET /wp-admin/includes/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/includes/index.php" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:37 -0400] "GET /wp-content/plugins/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:37 -0400] "GET /wp-includes/assets/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:37 -0400] "GET /wp-content/themes/news-portal/error.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:37 -0400] "GET /load.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:38 -0400] "GET /wp-includes/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:38 -0400] "GET /k.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:39 -0400] "GET /wp-conflg.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:40 -0400] "GET /wp-includes/block-bindings/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:41 -0400] "GET /wp-confiq.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:42 -0400] "GET /fm.php/sts.php HTTP/1.1" 200 28450 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:43 -0400] "GET /upload/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:43 -0400] "GET /upload/ HTTP/1.1" 200 28453 "http://www.lewaf.com/upload/index.php" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:44 -0400] "GET /images/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:45 -0400] "GET /images/ HTTP/1.1" 200 28450 "http://www.lewaf.com/images/index.php" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:47 -0400] "GET /wp-content/admin-header.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:47 -0400] "GET /autoload_classmap/function.php HTTP/1.1" 200 28454 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:48 -0400] "GET /5PJcpMFsD8B.php HTTP/1.1" 200 28452 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:49 -0400] "GET /wp-content/themes/sketch/404.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:49 -0400] "GET /wp-content/languages/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:49 -0400] "GET /wp-admin/media-new.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:54 -0400] "GET /tiny.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:55 -0400] "GET /license.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:56 -0400] "GET /av.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:57 -0400] "GET /wp-login-css.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:58 -0400] "GET /wp-content/classwithtostring.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:58 -0400] "GET /wp-includes/Text/Diff/Engine/template-singl-portfolio.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:58 -0400] "GET /wp-includes/SimplePie/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:58 -0400] "GET /lock360.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:33:59 -0400] "GET /alfa.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:00 -0400] "GET /wp-admin/maint/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:00 -0400] "GET /wp-admin/maint/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/maint/index.php" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:01 -0400] "GET /templates/atomic/templates.php HTTP/1.1" 200 28453 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:02 -0400] "GET /wp-links.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:03 -0400] "GET /wp-content/themes/pridmag/db.php?u HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:03 -0400] "GET /wp-content/plugins/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:03 -0400] "GET /new.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:04 -0400] "GET /wp-content/plugins/core-plugin/include.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:04 -0400] "GET /wp-links-opml.php HTTP/1.1" 200 179 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:05 -0400] "GET /wp-content/plugins/revslider/includes/external/page/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:05 -0400] "GET /wp-content/222.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:34:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787315646.3977689743041992187500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.150 - - [21/Aug/2026:08:34:05 -0400] "GET /about/function.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:06 -0400] "GET /wp-admin/maint/about.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:07 -0400] "GET /upload/upload.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:08 -0400] "GET /wpc.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:09 -0400] "GET /wp-includes/Text/Diff/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:09 -0400] "GET /as.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:11 -0400] "GET /wp-content/themes/twentytwentyfive/patterns/template-singl-portfolio.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:11 -0400] "GET /wso.php HTTP/1.1" 200 28441 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:12 -0400] "GET /wp-info.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:13 -0400] "GET /s.php HTTP/1.1" 200 28440 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:14 -0400] "GET /69.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:14 -0400] "GET /wp-crom.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:15 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:16 -0400] "GET /click.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:16 -0400] "GET /byp.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:17 -0400] "GET /wp-admin/ateprivacy-policy-guide.php HTTP/1.1" 200 28459 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:18 -0400] "GET /wp-includes/fonts/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:18 -0400] "GET /wp-content/themes/bltm/wp-login.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:19 -0400] "GET /wp-admin/includes/nav.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:19 -0400] "GET /shell3.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:20 -0400] "GET /hplfuns.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:21 -0400] "GET /admin/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:22 -0400] "GET /admin/ HTTP/1.1" 200 20 "http://www.lewaf.com/admin/index.php" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:26 -0400] "GET /wp-admin/admin-wolf.php HTTP/1.1" 200 28447 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:27 -0400] "GET /.well-known/acme-challenge/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:27 -0400] "GET /wp-content/uploads/2021/file.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:27 -0400] "GET /wp-content/themes/twentytwenty/404.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:27 -0400] "GET /wp-content/plugins/WordPressCore/include.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:28 -0400] "GET /xml.php HTTP/1.1" 200 28443 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:29 -0400] "GET /wp-conflg/function.php HTTP/1.1" 200 28450 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:29 -0400] "GET /network_xo.php HTTP/1.1" 200 28448 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:30 -0400] "GET /wp-includes/sitemaps/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:31 -0400] "GET /wp-includes/pomo/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:31 -0400] "GET /wp-content/plugins/revslider/includes/external/page/ HTTP/1.1" 200 28457 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:32 -0400] "GET /wp-content/themes/seotheme/mar.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:32 -0400] "GET /nrhogjyecktixbal0fnt5Cakc.php HTTP/1.1" 200 28464 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:33 -0400] "GET /wp-trackback.php HTTP/1.1" 200 130 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:33 -0400] "GET /ty.php HTTP/1.1" 200 28444 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:34 -0400] "GET /default.php HTTP/1.1" 200 28446 "-" "Go-http-client/1.1" 85.203.23.150 - - [21/Aug/2026:08:34:35 -0400] "GET /wp-includes/SimplePie/font-editor.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.141 - - [21/Aug/2026:08:34:50 -0400] "GET /wp-includes/js/tinymce/themes/inlite/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.141 - - [21/Aug/2026:08:34:51 -0400] "GET /wp-content/uploads/about.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.141 - - [21/Aug/2026:08:34:51 -0400] "GET /wp-content/themes/covr-wpcom/assets/fonts/manrope_normal.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.141 - - [21/Aug/2026:08:34:51 -0400] "GET /wp-admin/js/privacy-tools.min.php HTTP/1.1" 200 28453 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:27 -0400] "GET /wp-includes/css/dist/block-library/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:27 -0400] "GET /wp-includes/blocks/post-terms/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:08:35:28 -0400] "POST /wp-cron.php?doing_wp_cron=1787315728.8413441181182861328125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 85.203.23.135 - - [21/Aug/2026:08:35:28 -0400] "GET /b.php HTTP/1.1" 200 28442 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:29 -0400] "GET /wp-includes/blocks/audio/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:29 -0400] "GET /wp-admin/class-db.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:30 -0400] "GET /readme.php HTTP/1.1" 200 28445 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:31 -0400] "GET /files/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:32 -0400] "GET /files/ HTTP/1.1" 200 28451 "http://www.lewaf.com/files/index.php" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:33 -0400] "GET /wp-includes/Text/index.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:33 -0400] "GET /wp-includes/js/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:33 -0400] "GET /wp-includes/Requests/library/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:34 -0400] "GET /wp-content/themes/twentytwentyfour/ HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:34 -0400] "GET /wp-content/themes/radio.php HTTP/1.1" 403 199 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:34 -0400] "GET /wp-admin/shell.php HTTP/1.1" 200 28449 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:35 -0400] "GET /wp-admin/js/widgets/index.php HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 85.203.23.135 - - [21/Aug/2026:08:35:36 -0400] "GET /wp-admin/js/widgets/ HTTP/1.1" 403 199 "http://www.lewaf.com/wp-admin/js/widgets/index.php" "Go-http-client/1.1" 69.39.225.240 - - [21/Aug/2026:09:07:13 -0400] "POST /wp-cron.php?doing_wp_cron=1787317633.1977241039276123046875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.68 - - [21/Aug/2026:09:07:12 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.68 - - [21/Aug/2026:09:07:14 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [21/Aug/2026:09:22:11 -0400] "POST /wp-cron.php?doing_wp_cron=1787318531.9727430343627929687500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.166.250.187 - - [21/Aug/2026:09:22:10 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [21/Aug/2026:09:24:30 -0400] "POST /wp-cron.php?doing_wp_cron=1787318670.8455479145050048828125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:09:24:29 -0400] "GET /cart/?remove_item=6d29ccfababa3f755ab0ef13ec653fdf&_wpnonce=fa3dc37475 HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 69.39.225.240 - - [21/Aug/2026:10:10:27 -0400] "POST /wp-cron.php?doing_wp_cron=1787321427.7404770851135253906250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 172.255.82.197 - - [21/Aug/2026:10:10:23 -0400] "GET /wp-login.php HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/115.0.0.0 Safari/537.36 Edg/115.0.1901.203" 69.39.225.240 - - [21/Aug/2026:10:46:06 -0400] "POST /wp-cron.php?doing_wp_cron=1787323566.1148378849029541015625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 44.214.252.38 - - [21/Aug/2026:10:46:05 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 32.193.54.32 - - [21/Aug/2026:10:46:06 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [21/Aug/2026:11:11:39 -0400] "POST /wp-cron.php?doing_wp_cron=1787325099.4309051036834716796875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 51.68.107.154 - - [21/Aug/2026:11:11:38 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.154 - - [21/Aug/2026:11:11:39 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.154 - - [21/Aug/2026:11:11:40 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.107.154 - - [21/Aug/2026:11:11:44 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [21/Aug/2026:11:21:56 -0400] "POST /wp-cron.php?doing_wp_cron=1787325716.8019900321960449218750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 205.210.31.58 - - [21/Aug/2026:11:21:55 -0400] "GET / HTTP/1.1" 200 - "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 69.39.225.240 - - [21/Aug/2026:11:22:48 -0400] "POST /wp-cron.php?doing_wp_cron=1787325768.9852600097656250000000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 100.30.70.217 - - [21/Aug/2026:11:22:48 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:12:16:35 -0400] "POST /wp-cron.php?doing_wp_cron=1787328995.3371279239654541015625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.34 - - [21/Aug/2026:12:16:30 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 100.54.107.249 - - [21/Aug/2026:12:50:05 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 28526 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 100.54.107.249 - - [21/Aug/2026:12:50:07 -0400] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:12:54:23 -0400] "POST /wp-cron.php?doing_wp_cron=1787331263.3321120738983154296875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 44.243.158.134 - - [21/Aug/2026:12:54:20 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:13:01:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787331692.3331499099731445312500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 201.172.98.190 - - [21/Aug/2026:13:01:30 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.5249.119 Safari/537.36" 185.223.152.223 - - [21/Aug/2026:13:02:51 -0400] "GET /apple-touch-icon-precomposed.png HTTP/1.1" 200 28510 "-" "com.apple.WebKit.Networking/20622.1.22.118.4 Network/4277.140.33 macOS/15.6.1" 69.39.225.240 - - [21/Aug/2026:13:02:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787331773.4497880935668945312500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 185.223.152.219 - - [21/Aug/2026:13:02:51 -0400] "GET /favicon.ico HTTP/1.1" 200 20 "-" "com.apple.WebKit.Networking/20622.1.22.118.4 Network/4277.140.33 macOS/15.6.1" 185.223.152.208 - - [21/Aug/2026:13:02:51 -0400] "GET /apple-touch-icon.png HTTP/1.1" 200 28502 "-" "com.apple.WebKit.Networking/20622.1.22.118.4 Network/4277.140.33 macOS/15.6.1" 185.223.152.213 - - [21/Aug/2026:13:02:51 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/601.2.4 (KHTML, like Gecko) Version/9.0.1 Safari/601.2.4 facebookexternalhit/1.1 Facebot Twitterbot/1.0" 69.39.225.240 - - [21/Aug/2026:13:25:17 -0400] "POST /wp-cron.php?doing_wp_cron=1787333117.5504078865051269531250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 125.62.71.37 - - [21/Aug/2026:13:25:15 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 11; CPH2185) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.101 Mobile Safari/537.36" 20.151.129.194 - - [21/Aug/2026:13:57:55 -0400] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 199 "-" "-" 69.39.225.240 - - [21/Aug/2026:13:57:57 -0400] "POST /wp-cron.php?doing_wp_cron=1787335077.6133348941802978515625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:13:57:55 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:57:58 -0400] "GET /this_is_a_new_hello_world.php HTTP/1.1" 200 137964 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:00 -0400] "GET /3PJcpMFsD8B.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:02 -0400] "GET /3PJcpMFsD8B.php HTTP/1.1" 200 137936 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:04 -0400] "GET /new.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:06 -0400] "GET /new.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:08 -0400] "GET /bladeacss.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:10 -0400] "GET /bladeacss.php HTTP/1.1" 200 137932 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:12 -0400] "GET /shapes.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:14 -0400] "GET /shapes.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:16 -0400] "GET /parx.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:18 -0400] "GET /parx.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:20 -0400] "GET /fig.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:21 -0400] "GET /fig.php HTTP/1.1" 200 137920 "-" "-" 69.39.225.240 - - [21/Aug/2026:13:58:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787335105.5051589012145996093750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:13:58:23 -0400] "GET /qaivbilq.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:25 -0400] "GET /qaivbilq.php HTTP/1.1" 200 137930 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:27 -0400] "GET /saka.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:29 -0400] "GET /saka.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:31 -0400] "GET /hobi.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:32 -0400] "GET /hobi.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:34 -0400] "GET /ova.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:36 -0400] "GET /ova.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:39 -0400] "GET /pegi.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:40 -0400] "GET /pegi.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:42 -0400] "GET /mri.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:44 -0400] "GET /mri.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:46 -0400] "GET /oldd.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:47 -0400] "GET /oldd.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:49 -0400] "GET /rc.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:51 -0400] "GET /rc.php HTTP/1.1" 200 137918 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:53 -0400] "GET /jstring.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:55 -0400] "GET /jstring.php HTTP/1.1" 200 137928 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:58:57 -0400] "GET /ng.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:00 -0400] "GET /ng.php HTTP/1.1" 200 137918 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:02 -0400] "GET /zip.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [21/Aug/2026:13:59:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787335145.7768280506134033203125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:13:59:03 -0400] "GET /zip.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:05 -0400] "GET /infi.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:07 -0400] "GET /infi.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:09 -0400] "GET /html.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:11 -0400] "GET /html.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:13 -0400] "GET /heex.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:14 -0400] "GET /heex.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:16 -0400] "GET /confag.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:18 -0400] "GET /confag.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:20 -0400] "GET /baedss.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [21/Aug/2026:13:59:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787335164.0089240074157714843750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:13:59:22 -0400] "GET /baedss.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:24 -0400] "GET /3xrx.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:25 -0400] "GET /3xrx.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:27 -0400] "GET /ema.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:29 -0400] "GET /ema.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:31 -0400] "GET /atika.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:33 -0400] "GET /atika.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:35 -0400] "GET /koko.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:36 -0400] "GET /koko.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:39 -0400] "GET /simattacker.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:40 -0400] "GET /simattacker.php HTTP/1.1" 200 137936 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:42 -0400] "GET /Uploading.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:44 -0400] "GET /Uploading.php HTTP/1.1" 200 137932 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:46 -0400] "GET /source.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:47 -0400] "GET /source.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:49 -0400] "GET /styles.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:51 -0400] "GET /styles.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:53 -0400] "GET /kontol.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:55 -0400] "GET /kontol.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:57 -0400] "GET /9b97ec/index.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:13:59:59 -0400] "GET /9b97ec/ HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:01 -0400] "GET /b9007d/index.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:03 -0400] "GET /b9007d/ HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:05 -0400] "GET /aaa.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:08 -0400] "GET /aaa.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:10 -0400] "GET /000.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:12 -0400] "GET /000.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:15 -0400] "GET /11.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:17 -0400] "GET /11.php HTTP/1.1" 200 137918 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:19 -0400] "GET /about.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:21 -0400] "GET /about.php HTTP/1.1" 200 137924 "-" "-" 69.39.225.240 - - [21/Aug/2026:14:00:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787335225.6220040321350097656250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:14:00:23 -0400] "GET /admin.php/admin.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:25 -0400] "GET /admin.php/admin.php HTTP/1.1" 200 137944 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:28 -0400] "GET /media.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:29 -0400] "GET /media.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:32 -0400] "GET /admin.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:33 -0400] "GET /admin.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:35 -0400] "GET /mac.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:37 -0400] "GET /mac.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:40 -0400] "GET /1.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:42 -0400] "GET /1.php HTTP/1.1" 200 137916 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:45 -0400] "GET /coffee.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:48 -0400] "GET /coffee.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:50 -0400] "GET /classwithtostring.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:52 -0400] "GET /classwithtostring.php HTTP/1.1" 200 137948 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:54 -0400] "GET /wp-ws68.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:55 -0400] "GET /wp-ws68.php HTTP/1.1" 200 137928 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:57 -0400] "GET /yj09.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:00:59 -0400] "GET /yj09.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:03 -0400] "GET /scxy.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:04 -0400] "GET /scxy.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:07 -0400] "GET /blurbs.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:09 -0400] "GET /blurbs.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:11 -0400] "GET /bajah.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:14 -0400] "GET /bajah.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:16 -0400] "GET /domvf.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:18 -0400] "GET /domvf.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:20 -0400] "GET /fpwch.php HTTP/1.1" 200 - "-" "-" 69.39.225.240 - - [21/Aug/2026:14:01:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787335284.0200641155242919921875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:14:01:22 -0400] "GET /fpwch.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:24 -0400] "GET /adminner.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:26 -0400] "GET /adminner.php HTTP/1.1" 200 137930 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:27 -0400] "GET //abcd.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:29 -0400] "GET /abcd.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:32 -0400] "GET /simple.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:34 -0400] "GET /simple.php HTTP/1.1" 200 137926 "-" "-" 34.68.26.0 - - [21/Aug/2026:14:01:35 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; CMS-Checker/1.0; +https://example.com)" 20.151.129.194 - - [21/Aug/2026:14:01:36 -0400] "GET /xiugai.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:38 -0400] "GET /xiugai.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:40 -0400] "GET /wp-load.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:42 -0400] "GET /155.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:43 -0400] "GET /155.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:45 -0400] "GET /aaa.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:47 -0400] "GET /aaa.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:49 -0400] "GET /FWAZ.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:51 -0400] "GET /FWAZ.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:52 -0400] "GET /ccc.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:54 -0400] "GET /ccc.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:56 -0400] "GET /admin.php?p= HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:01:58 -0400] "GET /admin.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:00 -0400] "GET /reviall.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:01 -0400] "GET /reviall.php HTTP/1.1" 200 137928 "-" "-" 69.39.225.240 - - [21/Aug/2026:14:02:05 -0400] "POST /wp-cron.php?doing_wp_cron=1787335325.9292039871215820312500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:14:02:04 -0400] "GET /hp2.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:06 -0400] "GET /hp2.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:07 -0400] "GET //doc.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:09 -0400] "GET /doc.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:11 -0400] "GET /too.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:13 -0400] "GET /too.php HTTP/1.1" 200 137920 "-" "-" 170.106.152.218 - - [21/Aug/2026:14:02:14 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 20.151.129.194 - - [21/Aug/2026:14:02:15 -0400] "GET /kir.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:17 -0400] "GET /kir.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET //wp-includes/Requests/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET //wp-includes/assets/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET //wp-includes/l10n/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET /wp-content/uploads/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET //cgi-bin/index.php HTTP/1.1" 404 287 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:18 -0400] "GET //wp-includes/css/dist/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET //wp-includes/js/jquery/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET //wp-content/admin.php HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET /wp-content/themes/index.php HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET /wp-includes/blocks/details/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET /.well-known/about.php HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET /wp-includes/Text/ HTTP/1.1" 403 199 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:19 -0400] "GET /ts.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:21 -0400] "GET /ts.php HTTP/1.1" 200 137918 "-" "-" 69.39.225.240 - - [21/Aug/2026:14:02:24 -0400] "POST /wp-cron.php?doing_wp_cron=1787335344.7500629425048828125000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:14:02:22 -0400] "GET /bak.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:24 -0400] "GET /bak.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:26 -0400] "GET /olik.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:28 -0400] "GET /olik.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:30 -0400] "GET /about.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:32 -0400] "GET /about.php HTTP/1.1" 200 137924 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:34 -0400] "GET /19.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:35 -0400] "GET /19.php HTTP/1.1" 200 137918 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:37 -0400] "GET /3cf97/index.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:39 -0400] "GET /3cf97/ HTTP/1.1" 200 137918 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:41 -0400] "GET /2x.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:43 -0400] "GET /2x.php HTTP/1.1" 200 137918 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:45 -0400] "GET /12.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:47 -0400] "GET /12.php HTTP/1.1" 200 137918 "-" "-" 69.39.225.240 - - [21/Aug/2026:14:02:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787335371.0303010940551757812500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 20.151.129.194 - - [21/Aug/2026:14:02:49 -0400] "GET /term.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:51 -0400] "GET /term.php HTTP/1.1" 200 137922 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:53 -0400] "GET /images.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:54 -0400] "GET /images.php HTTP/1.1" 200 137926 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:56 -0400] "GET /222.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:02:58 -0400] "GET /222.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:03:01 -0400] "GET /ops.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:03:03 -0400] "GET /ops.php HTTP/1.1" 200 137920 "-" "-" 20.151.129.194 - - [21/Aug/2026:14:03:05 -0400] "GET /4PJcpMFsD8B.php HTTP/1.1" 200 - "-" "-" 20.151.129.194 - - [21/Aug/2026:14:03:07 -0400] "GET /4PJcpMFsD8B.php HTTP/1.1" 200 137936 "-" "-" 69.39.225.240 - - [21/Aug/2026:14:11:56 -0400] "POST /wp-cron.php?doing_wp_cron=1787335916.6130309104919433593750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.79.160.35 - - [21/Aug/2026:14:11:54 -0400] "HEAD /old/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 45.79.160.35 - - [21/Aug/2026:14:11:56 -0400] "HEAD /old/ HTTP/1.1" 200 - "http://lewaf.com/old/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 45.79.160.35 - - [21/Aug/2026:14:11:58 -0400] "HEAD /backup/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 45.79.160.35 - - [21/Aug/2026:14:12:00 -0400] "HEAD /backup/ HTTP/1.1" 200 - "http://lewaf.com/backup/" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36" 45.79.160.35 - - [21/Aug/2026:14:12:02 -0400] "HEAD /blog/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.79.160.35 - - [21/Aug/2026:14:12:05 -0400] "HEAD /blog/ HTTP/1.1" 200 - "http://lewaf.com/blog/" "Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.79.160.35 - - [21/Aug/2026:14:12:07 -0400] "HEAD /wordpress/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 45.79.160.35 - - [21/Aug/2026:14:12:09 -0400] "HEAD /wordpress/ HTTP/1.1" 200 - "http://lewaf.com/wordpress/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 45.79.160.35 - - [21/Aug/2026:14:12:11 -0400] "HEAD /wp/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 45.79.160.35 - - [21/Aug/2026:14:12:13 -0400] "HEAD /wp/ HTTP/1.1" 200 - "http://lewaf.com/wp/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.6422.112 Safari/537.36 Brave/1.63.120" 45.79.160.35 - - [21/Aug/2026:14:12:14 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468" 45.79.160.35 - - [21/Aug/2026:14:12:18 -0400] "HEAD /new/ HTTP/1.1" 200 - "-" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 45.79.160.35 - - [21/Aug/2026:14:12:21 -0400] "HEAD /new/ HTTP/1.1" 200 - "http://lewaf.com/new/" "Mozilla/5.0 (Linux; Android 12; Redmi Note 11) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.6312.112 Mobile Safari/537.36" 69.39.225.240 - - [21/Aug/2026:14:24:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787336672.0966880321502685546875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.68.26.0 - - [21/Aug/2026:14:24:29 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36" 51.222.10.130 - - [21/Aug/2026:15:15:15 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:15:17:27 -0400] "POST /wp-cron.php?doing_wp_cron=1787339847.9380679130554199218750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 5.133.192.75 - - [21/Aug/2026:15:17:25 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 14; SM-S901B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.280 Mobile Safari/537.36 OPR/80.4.4244.7786" 69.39.225.240 - - [21/Aug/2026:15:26:12 -0400] "POST /wp-cron.php?doing_wp_cron=1787340372.1438720226287841796875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [21/Aug/2026:15:26:10 -0400] "GET /robots.txt HTTP/1.1" 200 316 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 216.244.66.237 - - [21/Aug/2026:15:36:04 -0400] "GET /cart/?remove_item=c767895746d4bab5ebc71d6072cd3c48&_wpnonce=443bdd3bae HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 193.108.116.245 - - [21/Aug/2026:15:50:22 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:16:26:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787343992.9848260879516601562500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 66.249.70.173 - - [21/Aug/2026:16:26:29 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.172 - - [21/Aug/2026:16:26:46 -0400] "GET /ads.txt HTTP/1.1" 200 28479 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [21/Aug/2026:16:29:27 -0400] "POST /wp-cron.php?doing_wp_cron=1787344166.9602859020233154296875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 150.109.10.41 - - [21/Aug/2026:16:29:24 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 129.225.125.127 - - [21/Aug/2026:16:36:21 -0400] "GET /wp-content/plugins/pods/readme.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 129.225.125.127 - - [21/Aug/2026:16:36:23 -0400] "GET /wp-content/plugins/pods/init.php HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:16:37:18 -0400] "POST /wp-cron.php?doing_wp_cron=1787344638.3577730655670166015625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 64.227.20.212 - - [21/Aug/2026:16:37:15 -0400] "GET /.git/config HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 44.248.2.230 - - [21/Aug/2026:16:52:27 -0400] "GET / HTTP/1.1" 200 20 "-" "Go-http-client/1.1" 40.88.21.235 - - [21/Aug/2026:17:28:46 -0400] "GET / HTTP/1.1" 200 20 "-" "DuckDuckBot/1.1; (+http://duckduckgo.com/duckduckbot.html)" 65.21.32.180 - - [21/Aug/2026:17:40:13 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; AffsignalCrawler/1.0; +https://affsignal.com/bot)" 69.39.225.240 - - [21/Aug/2026:17:51:51 -0400] "POST /wp-cron.php?doing_wp_cron=1787349111.4927670955657958984375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 69.245.184.141 - - [21/Aug/2026:17:51:49 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:18:10:17 -0400] "POST /wp-cron.php?doing_wp_cron=1787350217.0462119579315185546875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.23 - - [21/Aug/2026:18:10:14 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.23 - - [21/Aug/2026:18:10:18 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 163.7.13.55 - - [21/Aug/2026:18:16:12 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:18:16:35 -0400] "POST /wp-cron.php?doing_wp_cron=1787350595.3502910137176513671875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.148.45.82 - - [21/Aug/2026:18:16:33 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 73.162.93.114 - - [21/Aug/2026:18:16:51 -0400] "GET / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/144.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:18:28:02 -0400] "POST /wp-cron.php?doing_wp_cron=1787351282.5331780910491943359375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 66.249.70.173 - - [21/Aug/2026:18:28:00 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.137 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [21/Aug/2026:18:38:49 -0400] "POST /wp-cron.php?doing_wp_cron=1787351929.8426449298858642578125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.63 - - [21/Aug/2026:18:38:47 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.63 - - [21/Aug/2026:18:38:50 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.203.48.166 - - [21/Aug/2026:18:42:17 -0400] "GET /actuator/env HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 103.203.48.166 - - [21/Aug/2026:18:42:17 -0400] "GET /actuator/env HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 103.203.48.166 - - [21/Aug/2026:18:42:21 -0400] "GET /actuator/env HTTP/1.1" 200 28495 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 69.39.225.240 - - [21/Aug/2026:18:42:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787352145.0814960002899169921875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.203.48.166 - - [21/Aug/2026:18:42:21 -0400] "GET /actuator/env HTTP/1.1" 200 28495 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 69.39.225.240 - - [21/Aug/2026:19:39:07 -0400] "POST /wp-cron.php?doing_wp_cron=1787355547.1506528854370117187500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 64.227.20.212 - - [21/Aug/2026:19:39:05 -0400] "GET /.git/config HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:20:07:03 -0400] "POST /wp-cron.php?doing_wp_cron=1787357223.3306820392608642578125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 199.45.154.76 - - [21/Aug/2026:20:07:01 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 43.129.162.34 - - [21/Aug/2026:21:04:52 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:21:04:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787360694.9923689365386962890625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.128.98.105 - - [21/Aug/2026:21:04:52 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 43.130.15.36 - - [21/Aug/2026:21:04:54 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 129.226.90.34 - - [21/Aug/2026:21:04:55 -0400] "GET /ip HTTP/1.1" 200 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36" 69.39.225.240 - - [21/Aug/2026:21:05:40 -0400] "POST /wp-cron.php?doing_wp_cron=1787360740.4478681087493896484375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 182.16.91.202 - - [21/Aug/2026:21:05:38 -0400] "GET /admin/login/index HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 182.16.91.202 - - [21/Aug/2026:21:05:38 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 182.16.91.202 - - [21/Aug/2026:21:05:41 -0400] "GET /admin/login/index HTTP/1.1" 200 28499 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0" 69.39.225.240 - - [21/Aug/2026:21:07:08 -0400] "POST /wp-cron.php?doing_wp_cron=1787360828.5990989208221435546875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 198.98.54.3 - - [21/Aug/2026:21:07:06 -0400] "GET / HTTP/1.1" 200 20 "-" "Python/3.14 aiohttp/3.14.3" 69.39.225.240 - - [21/Aug/2026:21:11:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787361115.5117549896240234375000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 98.95.148.89 - - [21/Aug/2026:21:11:53 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 69.39.225.240 - - [21/Aug/2026:23:35:45 -0400] "POST /wp-cron.php?doing_wp_cron=1787369745.0745759010314941406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.33 - - [21/Aug/2026:23:35:43 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [22/Aug/2026:00:00:27 -0400] "POST /wp-cron.php?doing_wp_cron=1787371227.3785920143127441406250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 216.244.66.237 - - [22/Aug/2026:00:00:23 -0400] "GET /cart/?remove_item=e1fe2d2278bd2e2e81fbc42380546640&_wpnonce=27ea86c2ce HTTP/1.1" 200 213838 "-" "Mozilla/5.0 (compatible; DotBot/1.2; +https://opensiteexplorer.org/dotbot; help@moz.com)" 47.79.233.158 - - [22/Aug/2026:00:16:44 -0400] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (compatible; rust_sniffer/0.1; +https://github.com/)" 69.39.225.240 - - [22/Aug/2026:00:25:38 -0400] "POST /wp-cron.php?doing_wp_cron=1787372738.6959040164947509765625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 64.227.20.212 - - [22/Aug/2026:00:25:36 -0400] "GET /.git/config HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 69.39.225.240 - - [22/Aug/2026:00:32:19 -0400] "POST /wp-cron.php?doing_wp_cron=1787373139.5328960418701171875000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 47.165.136.194 - - [22/Aug/2026:00:32:10 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36" 192.178.4.101 - - [22/Aug/2026:00:32:42 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [22/Aug/2026:00:32:53 -0400] "POST /wp-cron.php?doing_wp_cron=1787373173.0173931121826171875000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 66.249.70.173 - - [22/Aug/2026:00:32:47 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 192.178.4.100 - - [22/Aug/2026:00:32:53 -0400] "GET /ads.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 66.249.70.173 - - [22/Aug/2026:00:32:58 -0400] "GET /ads.txt HTTP/1.1" 200 28482 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [22/Aug/2026:00:45:56 -0400] "POST /wp-cron.php?doing_wp_cron=1787373956.5063469409942626953125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 18.234.52.190 - - [22/Aug/2026:00:45:54 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.75 Safari/537.36" 69.39.225.240 - - [22/Aug/2026:01:02:37 -0400] "POST /wp-cron.php?doing_wp_cron=1787374957.1836960315704345703125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 34.217.101.66 - - [22/Aug/2026:01:02:30 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.36" 69.39.225.240 - - [22/Aug/2026:01:34:01 -0400] "POST /wp-cron.php?doing_wp_cron=1787376841.2804191112518310546875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 192.178.4.99 - - [22/Aug/2026:01:33:59 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.137 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 69.39.225.240 - - [22/Aug/2026:01:52:13 -0400] "POST /wp-cron.php?doing_wp_cron=1787377933.5193519592285156250000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 199.45.155.94 - - [22/Aug/2026:01:52:10 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; CensysInspect/1.1; +https://about.censys.io/)" 69.39.225.240 - - [22/Aug/2026:02:14:03 -0400] "POST /wp-cron.php?doing_wp_cron=1787379243.6495440006256103515625 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 178.62.219.190 - - [22/Aug/2026:02:14:01 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 134.209.160.232 - - [22/Aug/2026:02:17:17 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" 103.131.71.180 - - [22/Aug/2026:02:32:31 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.180 - - [22/Aug/2026:02:32:38 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-web/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [22/Aug/2026:02:49:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787381365.1900019645690917968750 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 64.227.20.212 - - [22/Aug/2026:02:49:20 -0400] "GET /.git/config HTTP/1.1" 200 20 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36" 69.39.225.240 - - [22/Aug/2026:03:29:36 -0400] "POST /wp-cron.php?doing_wp_cron=1787383776.3021469116210937500000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 146.190.133.120 - - [22/Aug/2026:03:29:33 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/105.0.0.0 Safari/537.36" 35.240.54.217 - - [22/Aug/2026:03:38:36 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/84.0.4147.105 Safari/537.36" 69.39.225.240 - - [22/Aug/2026:03:41:19 -0400] "POST /wp-cron.php?doing_wp_cron=1787384479.9868080615997314453125 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 101.33.81.73 - - [22/Aug/2026:03:41:17 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 54.208.198.119 - - [22/Aug/2026:03:59:15 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/138.0.0.0 Safari/537.36 Edg/138.0.0.0" 69.39.225.240 - - [22/Aug/2026:03:59:23 -0400] "POST /wp-cron.php?doing_wp_cron=1787385563.5726308822631835937500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 54.208.198.119 - - [22/Aug/2026:03:59:15 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/136.0.0.0 Safari/537.36" 69.39.225.240 - - [22/Aug/2026:04:20:55 -0400] "POST /wp-cron.php?doing_wp_cron=1787386855.1317660808563232421875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 51.68.236.92 - - [22/Aug/2026:04:20:52 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.92 - - [22/Aug/2026:04:20:55 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 51.68.236.92 - - [22/Aug/2026:04:20:59 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [22/Aug/2026:04:21:25 -0400] "POST /wp-cron.php?doing_wp_cron=1787386884.9614090919494628906250 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 51.68.236.92 - - [22/Aug/2026:04:21:19 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; MJ12bot/v2.0.5; http://mj12bot.com/)" 69.39.225.240 - - [22/Aug/2026:04:40:33 -0400] "POST /wp-cron.php?doing_wp_cron=1787388033.2990770339965820312500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 45.130.203.158 - - [22/Aug/2026:04:40:28 -0400] "GET /.git/HEAD HTTP/1.1" 200 - "-" "Python-urllib/3.10" 45.130.203.138 - - [22/Aug/2026:04:40:33 -0400] "GET /.git/HEAD HTTP/1.1" 200 137942 "-" "Python-urllib/3.10" 69.39.225.240 - - [22/Aug/2026:04:44:32 -0400] "POST /wp-cron.php?doing_wp_cron=1787388272.0155398845672607421875 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 103.131.71.19 - - [22/Aug/2026:04:44:29 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 103.131.71.19 - - [22/Aug/2026:04:44:33 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (compatible; coccocbot-image/1.0; +http://help.coccoc.com/searchengine)" 69.39.225.240 - - [22/Aug/2026:04:58:46 -0400] "POST /wp-cron.php?doing_wp_cron=1787389126.5163860321044921875000 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 43.131.36.84 - - [22/Aug/2026:04:58:42 -0400] "GET / HTTP/1.1" 200 20 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1" 69.39.225.240 - - [22/Aug/2026:05:00:33 -0400] "POST /wp-cron.php?doing_wp_cron=1787389233.8679521083831787109375 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 158.173.166.128 - - [22/Aug/2026:05:00:27 -0400] "GET / HTTP/1.0" 200 - "http://lewaf.com/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Avast/131.0.0.0" 69.39.225.240 - - [22/Aug/2026:05:34:22 -0400] "POST /wp-cron.php?doing_wp_cron=1787391262.7170610427856445312500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 114.119.137.7 - - [22/Aug/2026:05:34:18 -0400] "GET /robots.txt HTTP/1.1" 200 171 "http://www.lewaf.com/robots.txt" "Mozilla/5.0 (compatible;PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 69.39.225.240 - - [22/Aug/2026:05:39:10 -0400] "POST /wp-cron.php?doing_wp_cron=1787391550.7137269973754882812500 HTTP/1.1" 200 20 "-" "WordPress/7.1; https://www.lewaf.com" 52.205.52.0 - - [22/Aug/2026:05:39:06 -0400] "GET /robots.txt HTTP/1.1" 200 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)" 32.193.55.192 - - [22/Aug/2026:05:39:10 -0400] "GET /robots.txt HTTP/1.1" 200 171 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/600.2.5 (KHTML, like Gecko) Version/8.0.2 Safari/600.2.5 (Gort)"