509318396 ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 172.105.42.26 - - [15/Oct/2026:13:07:50 +0000] "POST /wp-cron.php?doing_wp_cron=1792069670.4909470081329345703125 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 205.210.31.192 - - [15/Oct/2026:13:07:48 +0000] "GET / HTTP/1.1" 200 17243 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 51.8.102.149 - - [15/Oct/2026:14:03:17 +0000] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 172.105.42.26 - - [15/Oct/2026:15:18:28 +0000] "POST /wp-cron.php?doing_wp_cron=1792077508.1351189613342285156250 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 205.210.31.106 - - [15/Oct/2026:15:18:26 +0000] "GET /wp-json/wp/v2/users HTTP/1.1" 401 110 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [15/Oct/2026:15:26:48 +0000] "POST /wp-cron.php?doing_wp_cron=1792078008.6260859966278076171875 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 198.235.24.98 - - [15/Oct/2026:15:26:46 +0000] "GET /wp-json/ HTTP/1.1" 200 22215 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [15/Oct/2026:15:32:25 +0000] "POST /wp-cron.php?doing_wp_cron=1792078344.9669749736785888671875 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 205.210.31.196 - - [15/Oct/2026:15:32:23 +0000] "GET /wp-login.php HTTP/1.1" 404 14038 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [15/Oct/2026:15:36:03 +0000] "POST /wp-cron.php?doing_wp_cron=1792078562.9746150970458984375000 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 147.185.132.141 - - [15/Oct/2026:15:36:01 +0000] "GET /xmlrpc.php HTTP/1.1" 404 13991 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [15/Oct/2026:15:37:39 +0000] "POST /wp-cron.php?doing_wp_cron=1792078659.2741661071777343750000 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 198.235.24.110 - - [15/Oct/2026:15:37:37 +0000] "GET /?rest_route=/wp/v2/users HTTP/1.1" 401 110 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 172.105.42.26 - - [15/Oct/2026:15:46:56 +0000] "POST /wp-cron.php?doing_wp_cron=1792079215.8700211048126220703125 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 168.144.134.214 - - [15/Oct/2026:15:46:54 +0000] "GET /wp-admin/install.php HTTP/1.1" 200 637 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:47:30 +0000] "GET /wp/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:47:58 +0000] "GET /new/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:48:25 +0000] "GET /old/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:48:52 +0000] "GET /wordpress/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:49:08 +0000] "GET /test/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:49:30 +0000] "GET /blog/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:49:56 +0000] "GET /cms/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:50:14 +0000] "GET /web/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:50:40 +0000] "GET /backup/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:51:16 +0000] "GET /site/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 168.144.134.214 - - [15/Oct/2026:15:51:46 +0000] "GET /oldsite/wp-admin/install.php HTTP/1.1" 403 6634 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36" 172.105.42.26 - - [15/Oct/2026:17:16:13 +0000] "POST /?wordfence_syncAttackData=1792084573.2736 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:21:32 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 9423 "-" "-" 172.105.42.26 - - [15/Oct/2026:20:21:35 +0000] "POST /wp-cron.php?doing_wp_cron=1792095695.2931330204010009765625 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:21:33 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 14008 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:35 +0000] "GET /xc32tl6p1ockohrquxkroCfm.php HTTP/1.1" 404 14011 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:36 +0000] "GET /wp-filemannger4h.php HTTP/1.1" 404 14001 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:36 +0000] "GET /xex.php HTTP/1.1" 404 13993 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:37 +0000] "GET /ajiwhbfuyhawfaw.php HTTP/1.1" 404 14003 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:37 +0000] "GET /media_ORuYJt.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:38 +0000] "GET /sys-default.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:38 +0000] "GET /wp-atom.php HTTP/1.1" 301 20 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:39 +0000] "GET /feed/atom/ HTTP/1.1" 200 2950 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:39 +0000] "GET /wp-admink-oxw.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:39 +0000] "GET /wp-admin-cp.php HTTP/1.1" 404 13995 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:40 +0000] "GET /lxebz.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:41 +0000] "GET /voghx.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:41 +0000] "GET /aqerntcp.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:42 +0000] "GET /bzyjjvwh.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:42 +0000] "GET /cotlpnzc.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:43 +0000] "GET /caucuank.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:43 +0000] "GET /cwnhmnin.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:44 +0000] "GET /ddfxjhfc.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:44 +0000] "GET /dvwqceqg.php HTTP/1.1" 404 13997 "-" "-" 172.105.42.26 - - [15/Oct/2026:20:21:45 +0000] "POST /wp-cron.php?doing_wp_cron=1792095705.5036759376525878906250 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:21:45 +0000] "GET /fungdaqw.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:45 +0000] "GET /galywyfa.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:46 +0000] "GET /gexvejda.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:46 +0000] "GET /gmvgzlog.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:47 +0000] "GET /ieojgupm.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:47 +0000] "GET /lzetumfi.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:48 +0000] "GET /jjgvpoer.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:48 +0000] "GET /mztnnkpv.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:49 +0000] "GET /obblvbbd.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:50 +0000] "GET /oeriqtit.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:50 +0000] "GET /ooxrwvul.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:50 +0000] "GET /qpixboes.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:51 +0000] "GET /qqddbgvo.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:51 +0000] "GET /uufjuccw.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:52 +0000] "GET /vkvdhxhe.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:52 +0000] "GET /vrvmhxxm.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:53 +0000] "GET /wcszotff.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:53 +0000] "GET /wp-ainefgskk.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:54 +0000] "GET /wpm0b3nzcdiv.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:54 +0000] "GET /wpg7o83s25wc.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:55 +0000] "GET /wpfi9wny7mz5.php HTTP/1.1" 404 14000 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:56 +0000] "GET /wpdb6fgfyhpv.php HTTP/1.1" 404 14000 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:56 +0000] "GET /wpc2r80jm49u.php HTTP/1.1" 404 14000 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:57 +0000] "GET /wp473ch9upo6.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:57 +0000] "GET /wp78om2jr9et.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:58 +0000] "GET /wpombyqwjs8h.php HTTP/1.1" 404 14000 "-" "-" 172.105.42.26 - - [15/Oct/2026:20:21:59 +0000] "POST /wp-cron.php?doing_wp_cron=1792095719.0442459583282470703125 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:21:58 +0000] "GET /wposlv3sr0ca.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:21:59 +0000] "GET /wpr7zkv8rsc3.php HTTP/1.1" 404 14000 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:00 +0000] "GET /ytfwugtf.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:00 +0000] "GET /zennqygt.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:01 +0000] "GET /zsmscudh.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:01 +0000] "GET /wygmlues.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:02 +0000] "GET /wtemwjlg.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:03 +0000] "GET /wpxihoi49ouh.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:03 +0000] "GET /jaefegfg.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:04 +0000] "GET /asdgdhfdhfbfnh.php HTTP/1.1" 404 14001 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:04 +0000] "GET /ggrujrlgsfq.php HTTP/1.1" 404 14000 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:04 +0000] "GET /wytgirgt.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:05 +0000] "GET /biudghidgnhdighd.php HTTP/1.1" 404 14003 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:05 +0000] "GET /init-notica.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:06 +0000] "GET /slres.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:06 +0000] "GET /wp-omo.php HTTP/1.1" 404 13993 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:07 +0000] "GET /fgsdhdh.php HTTP/1.1" 404 13995 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:07 +0000] "GET /shellv4.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:08 +0000] "GET /utchiha_yOjGCNza.php HTTP/1.1" 404 14005 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:08 +0000] "GET /replace.php HTTP/1.1" 404 13995 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:09 +0000] "GET /fpwch.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:09 +0000] "GET /ant.php HTTP/1.1" 404 13992 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:10 +0000] "GET /greem_res.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:10 +0000] "GET /test2.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:10 +0000] "GET /v2.php HTTP/1.1" 404 13992 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:11 +0000] "GET /v4.php HTTP/1.1" 404 13992 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:11 +0000] "GET /wander.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:14 +0000] "GET /wp-ad3.php HTTP/1.1" 404 13993 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:14 +0000] "GET /wp-links-opml.php HTTP/1.1" 200 202 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:15 +0000] "GET /asset-backup.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:15 +0000] "GET /apapun.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:16 +0000] "GET /ph33w.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:16 +0000] "GET /bibliothecal.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:17 +0000] "GET /hans.php HTTP/1.1" 404 13993 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:18 +0000] "GET /labializing.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:19 +0000] "GET /geforce.php HTTP/1.1" 404 13993 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:19 +0000] "GET /ayshqxcj.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:20 +0000] "GET /bfnvrqbp.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:20 +0000] "GET /bkvovvpv.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:21 +0000] "GET /bngzxnbo.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:21 +0000] "GET /bobbfzsc.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:22 +0000] "GET /bzikyuax.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:22 +0000] "GET /cdlzwypb.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:23 +0000] "GET /czwdxyyn.php HTTP/1.1" 404 13997 "-" "-" 172.105.42.26 - - [15/Oct/2026:20:22:32 +0000] "POST /wp-cron.php?doing_wp_cron=1792095752.9124701023101806640625 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:22:32 +0000] "GET /dgkjwrau.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:33 +0000] "GET /elonrahm.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:33 +0000] "GET /eyzpjirm.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:34 +0000] "GET /ezvwoahw.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:34 +0000] "GET /fauxgbqc.php HTTP/1.1" 404 13995 "-" "-" 172.105.42.26 - - [15/Oct/2026:20:22:35 +0000] "POST /wp-cron.php?doing_wp_cron=1792095755.5309460163116455078125 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:22:35 +0000] "GET /hahjvgea.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:35 +0000] "GET /hixvzulw.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:36 +0000] "GET /hpxlnpte.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:36 +0000] "GET /iclvpmgm.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:37 +0000] "GET /jkttmisf.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:37 +0000] "GET /klypwore.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:38 +0000] "GET /kvjvahmr.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:39 +0000] "GET /kzokqbxj.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:39 +0000] "GET /lnjwcmer.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:39 +0000] "GET /loxnyspn.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:40 +0000] "GET /lttpvead.php HTTP/1.1" 404 13995 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:41 +0000] "GET /maycdmqu.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:41 +0000] "GET /mdlgkxrx.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:41 +0000] "GET /msiuhqzn.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:42 +0000] "GET /naqmhhwf.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:43 +0000] "GET /nhoftrcc.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:43 +0000] "GET /nokswnuh.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:44 +0000] "GET /oacgonhq.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:44 +0000] "GET /obziyido.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:45 +0000] "GET /opyggwvb.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:45 +0000] "GET /ovaacwazx.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:47 +0000] "GET /ovaaloxql.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:47 +0000] "GET /ovaaqvqpm.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:48 +0000] "GET /ovaatshqo.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:49 +0000] "GET /ovaaypssm.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:49 +0000] "GET /ovabiavah.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:49 +0000] "GET /ovabofozl.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:50 +0000] "GET /ovabtuzxi.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:50 +0000] "GET /ovacqevmy.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:51 +0000] "GET /ovaculplc.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:52 +0000] "GET /ovadavtob.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:52 +0000] "GET /ovadbooaj.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:53 +0000] "GET /ovadchmrm.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:53 +0000] "GET /yycxckto.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:53 +0000] "GET /ywefpqyh.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:54 +0000] "GET /xbgqdfrj.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:54 +0000] "GET /wyhspgsh.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:55 +0000] "GET /wvduicrc.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:55 +0000] "GET /wp-tkdc.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:56 +0000] "GET /wp-rrtx.php HTTP/1.1" 404 13994 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:56 +0000] "GET /wdkdxubp.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:57 +0000] "GET /uxfojnfj.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:57 +0000] "GET /uutfyicu.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:58 +0000] "GET /uncgiekg.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:58 +0000] "GET /tybvjmtg.php HTTP/1.1" 404 13997 "-" "-" 172.105.42.26 - - [15/Oct/2026:20:22:59 +0000] "POST /wp-cron.php?doing_wp_cron=1792095779.1535379886627197265625 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 20.200.208.154 - - [15/Oct/2026:20:22:58 +0000] "GET /ttpjhlzd.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:59 +0000] "GET /thetllve.php HTTP/1.1" 404 13996 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:22:59 +0000] "GET /themes4.php HTTP/1.1" 404 13993 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:01 +0000] "GET /ppbqtogr.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:01 +0000] "GET /pcwrsrij.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:02 +0000] "GET /oxxapvua.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:02 +0000] "GET /ovazxzjry.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:03 +0000] "GET /ovazpkyvt.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:03 +0000] "GET /ovazjkvoq.php HTTP/1.1" 404 13999 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:04 +0000] "GET /ovayrtsci.php HTTP/1.1" 404 13997 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:04 +0000] "GET /ovayjnwbg.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:05 +0000] "GET /ovaxxddzf.php HTTP/1.1" 404 13998 "-" "-" 20.200.208.154 - - [15/Oct/2026:20:23:05 +0000] "GET /ovaxwxwwg.php HTTP/1.1" 404 13998 "-" "-" 172.105.42.26 - - [15/Oct/2026:22:18:09 +0000] "POST /wp-cron.php?doing_wp_cron=1792102689.3016490936279296875000 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 168.144.39.103 - - [15/Oct/2026:22:18:07 +0000] "GET /wp-login.php HTTP/1.1" 404 14038 "https://www.google.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 168.144.39.103 - - [15/Oct/2026:22:18:16 +0000] "GET /wp-login.php HTTP/1.1" 404 14038 "https://www.facebook.com/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7; rv:121.0) Gecko/20100101 Firefox/121.0" 168.144.39.103 - - [15/Oct/2026:22:18:20 +0000] "GET /wp-admin/ HTTP/1.1" 302 20 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 168.144.39.103 - - [15/Oct/2026:22:18:25 +0000] "GET /404/ HTTP/1.1" 404 13991 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36" 74.225.146.100 - - [15/Oct/2026:23:40:55 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 9423 "-" "-" 172.105.42.26 - - [15/Oct/2026:23:40:57 +0000] "POST /wp-cron.php?doing_wp_cron=1792107657.8318870067596435546875 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 74.225.146.100 - - [15/Oct/2026:23:40:56 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 14008 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:40:58 +0000] "GET /2EYLzmsyjO8.php HTTP/1.1" 404 14001 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:40:58 +0000] "GET /init-notica.php HTTP/1.1" 404 13997 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:40:58 +0000] "GET /index/function.php HTTP/1.1" 404 13997 "-" "-" 172.105.42.26 - - [15/Oct/2026:23:40:59 +0000] "POST /wp-cron.php?doing_wp_cron=1792107659.1383481025695800781250 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 74.225.146.100 - - [15/Oct/2026:23:40:58 +0000] "GET /wp-trbacks.php HTTP/1.1" 404 13995 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:40:59 +0000] "GET /go.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:40:59 +0000] "GET /1ac.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:40:59 +0000] "GET /40341.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:00 +0000] "GET /aa.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:00 +0000] "GET /yich.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:00 +0000] "GET /kk00.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:00 +0000] "GET /wp-logis.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:01 +0000] "GET /g1.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:01 +0000] "GET /2.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:01 +0000] "GET /robots.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:01 +0000] "GET /k.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:01 +0000] "GET /w.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:02 +0000] "GET /images.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:02 +0000] "GET /alls.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:02 +0000] "GET ///admin.php HTTP/1.1" 200 5183 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:03 +0000] "GET /k2.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:03 +0000] "GET /dejavu.php HTTP/1.1" 404 13995 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:03 +0000] "GET /h02ugyh.php HTTP/1.1" 404 13995 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:03 +0000] "GET /155.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:04 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:04 +0000] "GET /makeasmtp.php HTTP/1.1" 404 13997 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:04 +0000] "GET /8.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:04 +0000] "GET /1.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:04 +0000] "GET //admin.php HTTP/1.1" 200 5204 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:04 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:05 +0000] "GET /classwithtostring.php HTTP/1.1" 404 14000 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:05 +0000] "GET //adminfuns.php HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:05 +0000] "GET /adminfuns.php HTTP/1.1" 404 13996 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:05 +0000] "GET /222.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:06 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 13998 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:06 +0000] "GET /wp.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:06 +0000] "GET /simple.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:06 +0000] "GET /chosen.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:06 +0000] "GET /als.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:07 +0000] "GET /admin.php? HTTP/1.1" 200 5204 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:07 +0000] "GET /f35.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:07 +0000] "GET /adminer.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:07 +0000] "GET /xiugai.php?p= HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:07 +0000] "GET /xiugai.php HTTP/1.1" 404 13995 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:08 +0000] "GET /inx.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:08 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 14001 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:08 +0000] "GET /media.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:09 +0000] "GET /shiny.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:09 +0000] "GET /403dd.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:09 +0000] "GET /insc.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:10 +0000] "GET /file.php? HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:10 +0000] "GET /dex.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:10 +0000] "GET /key.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:10 +0000] "GET /fling.php?p= HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:11 +0000] "GET /fling.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:11 +0000] "GET /sm.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:11 +0000] "GET /a.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:11 +0000] "GET /av.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:12 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 14000 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:12 +0000] "GET /0.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:12 +0000] "GET /min.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:12 +0000] "GET /wp-whe.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:13 +0000] "GET /wp-filemanager1.php HTTP/1.1" 404 13996 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:13 +0000] "GET /faiy.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:13 +0000] "GET /file-mancvgertdxz.php HTTP/1.1" 404 14002 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:13 +0000] "GET /myglu.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:14 +0000] "GET /bnmtp.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:14 +0000] "GET /wp-admin/includes/class-wp-site-list.php HTTP/1.1" 404 14052 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:14 +0000] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 404 13998 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET /flamini.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET /alfa.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET /wp-content/index.php HTTP/1.1" 200 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 425 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 200 542 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:15 +0000] "GET //wp-admin/js/index.php HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:16 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 1864 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:16 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 13991 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:16 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 200 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:16 +0000] "GET //cgi-bin/index.php HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:16 +0000] "GET /cgi-bin/ HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:16 +0000] "GET /wp-manager.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:17 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:17 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 302 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:17 +0000] "GET /404/ HTTP/1.1" 404 13990 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:18 +0000] "GET /wp-admin/maint/index.php HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:18 +0000] "GET /wp-admin/maint/ HTTP/1.1" 200 355 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:18 +0000] "GET //wp-content/plugins/erinyani/ HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:18 +0000] "GET /wp-content/plugins/erinyani/ HTTP/1.1" 404 14047 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:18 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 691 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:18 +0000] "GET /opsh.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:19 +0000] "GET /wp-filemannger4h.php HTTP/1.1" 404 14000 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:19 +0000] "GET /coffexiumimage.php HTTP/1.1" 404 13998 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:19 +0000] "GET /img.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:19 +0000] "GET /lowfile.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:20 +0000] "GET /class-walker-footer-dev.php?p= HTTP/1.1" 301 20 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:20 +0000] "GET /class-walker-footer-dev.php HTTP/1.1" 404 14006 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:20 +0000] "GET /cheng.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:21 +0000] "GET /nex.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:21 +0000] "GET /lanbai.php HTTP/1.1" 404 13994 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:21 +0000] "GET /zv.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:21 +0000] "GET /cache.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:21 +0000] "GET /kgblegacy.php HTTP/1.1" 404 13997 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:22 +0000] "GET /wp-includes/images/crystal/ HTTP/1.1" 200 523 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:22 +0000] "GET /wp-includes/js/tinymce/ HTTP/1.1" 200 507 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:22 +0000] "GET /Component.php HTTP/1.1" 404 13996 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:22 +0000] "GET /wsoby.php HTTP/1.1" 403 9423 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:22 +0000] "GET /zhidagen.php HTTP/1.1" 404 13995 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:22 +0000] "GET /fferr.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:23 +0000] "GET /wpconf.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:23 +0000] "GET /v543.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:23 +0000] "GET /asaa.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:23 +0000] "GET /auw.php HTTP/1.1" 404 13992 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:24 +0000] "GET /dpack.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:24 +0000] "GET /opomo.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:24 +0000] "GET /fac.php HTTP/1.1" 404 13993 "-" "-" 74.225.146.100 - - [15/Oct/2026:23:41:25 +0000] "GET /122.php HTTP/1.1" 404 13992 "-" "-" 172.105.42.26 - - [15/Oct/2026:23:46:35 +0000] "POST /wp-cron.php?doing_wp_cron=1792107994.8269369602203369140625 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 40.77.167.18 - - [15/Oct/2026:23:46:33 +0000] "GET /wp-json/wp/v2/pages/332537 HTTP/1.1" 200 6926 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36" 52.187.230.78 - - [16/Oct/2026:00:06:37 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:38 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 14007 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:40 +0000] "GET /ws.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:40 +0000] "GET /bnmtp.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:41 +0000] "GET /date1.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:41 +0000] "GET /opsh.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:42 +0000] "GET /ebkid.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:42 +0000] "GET /MacKenzie.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:43 +0000] "GET /MacKenzie.php HTTP/1.1" 404 13997 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:43 +0000] "GET /np.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:44 +0000] "GET /np.php HTTP/1.1" 404 13990 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:44 +0000] "GET /samll.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:45 +0000] "GET /config.php? HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:45 +0000] "GET /lock.php HTTP/1.1" 404 13990 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:46 +0000] "GET /b.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:46 +0000] "GET /b.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:46 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 200 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:47 +0000] "GET /adminfuns.php HTTP/1.1" 404 13995 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:47 +0000] "GET /alfa.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:48 +0000] "GET /222.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:48 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 14000 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:49 +0000] "GET /media.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:49 +0000] "GET /mac.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:50 +0000] "GET /ops.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:50 +0000] "GET /1.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:50 +0000] "GET /aaa.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:51 +0000] "GET /aaa.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:51 +0000] "GET /chosen.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:52 +0000] "GET /2P.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:52 +0000] "GET /ant.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:53 +0000] "GET /sitemap.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:53 +0000] "GET /zwso.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:54 +0000] "GET /simple.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:54 +0000] "GET //buy.php HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:55 +0000] "GET /buy.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:55 +0000] "GET /ioxi-o.php HTTP/1.1" 404 13994 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:56 +0000] "GET /ans.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:56 +0000] "GET /gf.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:57 +0000] "GET /man.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:57 +0000] "GET /dev.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:58 +0000] "GET /dev.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:58 +0000] "GET /ms-edit.php HTTP/1.1" 404 13994 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:59 +0000] "GET /txets.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:59 +0000] "GET /hao.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:06:59 +0000] "GET /hao.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:00 +0000] "GET /33.php HTTP/1.1" 404 13990 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:00 +0000] "GET /adminner.php HTTP/1.1" 404 13995 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:01 +0000] "GET /thoms.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:01 +0000] "GET /a.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:02 +0000] "GET /sid.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:02 +0000] "GET /bro.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:03 +0000] "GET /xwpg.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:03 +0000] "GET /radio.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:04 +0000] "GET /Components.php HTTP/1.1" 404 13996 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:04 +0000] "GET /gelay.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:05 +0000] "GET /readme.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:05 +0000] "GET /max.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:06 +0000] "GET /post.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:06 +0000] "GET /themes.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:07 +0000] "GET /termps.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:07 +0000] "GET /brand.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:08 +0000] "GET /9.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:08 +0000] "GET /class.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:08 +0000] "GET /ba.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:09 +0000] "GET /file.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:09 +0000] "GET /gulu.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:10 +0000] "GET /1a.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:10 +0000] "GET /1a.php HTTP/1.1" 404 13990 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:11 +0000] "GET /abcd.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:12 +0000] "GET /gfile.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:12 +0000] "GET /amdin.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:13 +0000] "GET /sallu.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:13 +0000] "GET /myglu.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:14 +0000] "GET /pudym.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:14 +0000] "GET /goods.php HTTP/1.1" 404 13993 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:15 +0000] "GET /blog/wp-login.php HTTP/1.1" 404 14037 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:15 +0000] "GET /replace.php HTTP/1.1" 404 13994 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:16 +0000] "GET /magento/index.php/admin/ HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:16 +0000] "GET /magento/admin/ HTTP/1.1" 404 13995 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:16 +0000] "GET /wp-content/admin.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:17 +0000] "GET /config/cache.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:17 +0000] "GET /3.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:18 +0000] "GET /lowfile.php HTTP/1.1" 404 13994 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:18 +0000] "GET /hinfofuns.php HTTP/1.1" 404 13996 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:19 +0000] "GET /wp-admin/css/ HTTP/1.1" 200 1655 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:19 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 13998 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:19 +0000] "GET /wp-content/plugins/simple/simple.php HTTP/1.1" 404 14047 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:20 +0000] "GET /sm.php HTTP/1.1" 404 13991 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:20 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 425 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:21 +0000] "GET /0.php HTTP/1.1" 403 9423 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:21 +0000] "GET ///lobster.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:21 +0000] "GET /lobster.php HTTP/1.1" 404 13994 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:22 +0000] "GET /yot7xivi.php HTTP/1.1" 404 13995 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:22 +0000] "GET /wp-includes/SimplePie/about.php HTTP/1.1" 403 9423 "-" "-" 172.105.42.26 - - [16/Oct/2026:00:07:23 +0000] "POST /wp-cron.php?doing_wp_cron=1792109243.3104600906372070312500 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 52.187.230.78 - - [16/Oct/2026:00:07:23 +0000] "GET /f6.php HTTP/1.1" 404 13990 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:23 +0000] "GET /wp-qsj2pghj.php HTTP/1.1" 404 13997 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:24 +0000] "GET /xty.php?p= HTTP/1.1" 301 20 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:24 +0000] "GET /xty.php HTTP/1.1" 404 13992 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:25 +0000] "GET /bckdeqnv.php HTTP/1.1" 404 13996 "-" "-" 52.187.230.78 - - [16/Oct/2026:00:07:25 +0000] "GET /uiuvs58l.update.php HTTP/1.1" 404 14001 "-" "-" 216.73.217.101 - - [16/Oct/2026:00:12:45 +0000] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)" 4.196.200.15 - - [16/Oct/2026:00:54:18 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 9423 "-" "-" 172.105.42.26 - - [16/Oct/2026:00:54:21 +0000] "POST /wp-cron.php?doing_wp_cron=1792112061.0830130577087402343750 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 4.196.200.15 - - [16/Oct/2026:00:54:19 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 14007 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:21 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 14000 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:22 +0000] "GET /z70.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:22 +0000] "GET /1.php?p= HTTP/1.1" 301 20 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:23 +0000] "GET /1.php HTTP/1.1" 403 9423 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:23 +0000] "GET /radio.php HTTP/1.1" 403 9423 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:23 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 13998 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:24 +0000] "GET /z60.php?p= HTTP/1.1" 301 20 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:24 +0000] "GET /z60.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:25 +0000] "GET /ebkid.php HTTP/1.1" 404 13993 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:25 +0000] "GET /133.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:26 +0000] "GET /cae.php HTTP/1.1" 404 13990 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:26 +0000] "GET /txets.php HTTP/1.1" 403 9423 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:27 +0000] "GET /ccc.php HTTP/1.1" 404 13990 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:27 +0000] "GET /opsh.php HTTP/1.1" 404 13992 "-" "-" 172.105.42.26 - - [16/Oct/2026:00:54:28 +0000] "POST /wp-cron.php?doing_wp_cron=1792112068.3289210796356201171875 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 4.196.200.15 - - [16/Oct/2026:00:54:28 +0000] "GET /gulu.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:28 +0000] "GET /admins.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:29 +0000] "GET /wp-X1s2e6h3p7.php HTTP/1.1" 404 13998 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:29 +0000] "GET /wp-logis.php HTTP/1.1" 404 13994 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:30 +0000] "GET /ano.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:30 +0000] "GET /ffs.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:31 +0000] "GET /lanbai.php HTTP/1.1" 404 13993 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:31 +0000] "GET /file5.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:32 +0000] "GET /fferr.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:32 +0000] "GET /class-walker-footer-dev.php?p= HTTP/1.1" 301 20 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:33 +0000] "GET /class-walker-footer-dev.php HTTP/1.1" 404 14005 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:33 +0000] "GET /salluda.php HTTP/1.1" 404 13994 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:34 +0000] "GET /file-B-G.php HTTP/1.1" 404 13994 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:34 +0000] "GET /date.php HTTP/1.1" 404 13991 "-" "-" 172.105.42.26 - - [16/Oct/2026:00:54:35 +0000] "POST /wp-cron.php?doing_wp_cron=1792112075.4461660385131835937500 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 4.196.200.15 - - [16/Oct/2026:00:54:35 +0000] "GET /wp-fxxxx.php HTTP/1.1" 404 13994 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:35 +0000] "GET /wp-good.php HTTP/1.1" 404 13993 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:36 +0000] "GET /ws39.php?p= HTTP/1.1" 301 20 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:36 +0000] "GET /ws39.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:37 +0000] "GET /wp-ainefgskk.php HTTP/1.1" 404 13996 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:37 +0000] "GET /KF2rOEAJDvI.php HTTP/1.1" 404 14001 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:38 +0000] "GET /ana.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:38 +0000] "GET /122.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:39 +0000] "GET /lp.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:39 +0000] "GET /wp-firewall.php HTTP/1.1" 404 13996 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:40 +0000] "GET /y.php HTTP/1.1" 403 9423 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:40 +0000] "GET /wp-trbacks.php HTTP/1.1" 404 13994 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:40 +0000] "GET /kerang.php HTTP/1.1" 404 13993 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:41 +0000] "GET /wp-themes.php HTTP/1.1" 404 13993 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:41 +0000] "GET /wp-login.php HTTP/1.1" 404 14037 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:42 +0000] "GET /wp-load.php HTTP/1.1" 200 20 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:42 +0000] "GET /c4.php HTTP/1.1" 404 13990 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:43 +0000] "GET /themes.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:44 +0000] "GET /plss3.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:44 +0000] "GET /zpore1.php HTTP/1.1" 404 13993 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:45 +0000] "GET /add.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:45 +0000] "GET /cgia.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:46 +0000] "GET /lhaiolky.php HTTP/1.1" 404 13996 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:46 +0000] "GET /ab.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:47 +0000] "GET /revision-files.php HTTP/1.1" 404 13996 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:47 +0000] "GET /uuu.php HTTP/1.1" 404 13992 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:48 +0000] "GET /mac.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:48 +0000] "GET /ops.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:49 +0000] "GET /b8.php HTTP/1.1" 404 13991 "-" "-" 4.196.200.15 - - [16/Oct/2026:00:54:49 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 13999 "-" "-" 172.105.42.26 - - [16/Oct/2026:03:57:30 +0000] "POST /wp-cron.php?doing_wp_cron=1792123050.4301900863647460937500 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 216.25.124.24 - - [16/Oct/2026:03:57:27 +0000] "GET / HTTP/1.1" 200 17242 "-" "RecordedFuture Global Inventory Crawler" 51.8.102.235 - - [16/Oct/2026:06:05:51 +0000] "GET /robots.txt HTTP/1.1" 304 - "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 172.105.42.26 - - [16/Oct/2026:07:03:00 +0000] "POST /wp-cron.php?doing_wp_cron=1792134180.2036418914794921875000 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 34.96.147.10 - - [16/Oct/2026:07:02:58 +0000] "GET / HTTP/1.1" 200 17242 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:02 +0000] "GET /.git/config HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:03:00 +0000] "POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.1" 200 32 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 34.96.147.10 - - [16/Oct/2026:07:03:02 +0000] "POST / HTTP/1.1" 200 14655 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:04 +0000] "GET /.env HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:04 +0000] "GET /.env.local HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:04 +0000] "GET /.env.production HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:04 +0000] "GET /.env.staging HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:05 +0000] "GET /.env.development HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:05 +0000] "GET /.env.test HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:03:02 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=quick&cronKey=5c97a4260975e708512c34ab979b6998&signature=8359d1c93b89c571eb290f1244c1fb7e77aaa6f06cac35b141f0cfb5143f4dca HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 34.96.147.10 - - [16/Oct/2026:07:03:06 +0000] "GET /.env.remote HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:06 +0000] "GET /.env.bak HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:06 +0000] "GET /.env.backup HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:07 +0000] "GET /.env.save HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.96.147.10 - - [16/Oct/2026:07:03:07 +0000] "GET /.env.old HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 72.145.76.96 - - [16/Oct/2026:07:03:58 +0000] "GET /?_wfsf=removeAlertEmail&jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImtodXJyYW0uZGhlZGhpQGNvcmUzY29uc3VsdGFuY3kuY29tIiwiX2V4cCI6MTc5MjczODk4NX0.gI_lTkZ8MzDS8gdSNpdwJo4r4dZ1L6QBKEbEwiTItXQ HTTP/1.1" 200 1123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:04:00 +0000] "POST /wp-cron.php?doing_wp_cron=1792134240.6747760772705078125000 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 119.13.232.1 - - [16/Oct/2026:07:04:00 +0000] "GET /wp-admin/admin.php?page=WordfenceScan HTTP/1.1" 302 20 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 119.13.232.1 - - [16/Oct/2026:07:04:02 +0000] "GET /404/ HTTP/1.1" 404 13989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 72.145.76.96 - - [16/Oct/2026:07:04:03 +0000] "GET /404/ HTTP/1.1" 404 13989 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 72.145.76.96 - - [16/Oct/2026:07:04:10 +0000] "GET /favicon.ico HTTP/1.1" 302 20 "https://workforcesaudi.core3.agency/?_wfsf=removeAlertEmail&jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJlbWFpbCI6ImtodXJyYW0uZGhlZGhpQGNvcmUzY29uc3VsdGFuY3kuY29tIiwiX2V4cCI6MTc5MjczODk4NX0.gI_lTkZ8MzDS8gdSNpdwJo4r4dZ1L6QBKEbEwiTItXQ" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:06:10 +0000] "POST /wp-cron.php?doing_wp_cron=1792134370.5799360275268554687500 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 72.145.76.96 - - [16/Oct/2026:07:06:08 +0000] "GET / HTTP/1.1" 200 17243 "https://workforcesaudi.core3.agency/404/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.175 Safari/537.36" 72.145.76.96 - - [16/Oct/2026:07:06:24 +0000] "GET /wp-json/contact-form-7/v1/contact-forms/987/feedback/schema HTTP/1.1" 200 560 "https://workforcesaudi.core3.agency/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.7444.175 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:10:13 +0000] "POST /wp-cron.php?doing_wp_cron=1792134613.3208250999450683593750 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 106.63.26.22 - - [16/Oct/2026:07:10:11 +0000] "GET / HTTP/1.1" 200 17242 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.15 - - [16/Oct/2026:07:10:26 +0000] "GET / HTTP/1.1" 200 17242 "http://workforcesaudi.core3.agency/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.6 - - [16/Oct/2026:07:10:32 +0000] "GET /wp-content/uploads/2025/06/fbdb0c2f48092694631ef4ddac917f8f-300x300.png HTTP/1.1" 200 4654 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.147 - - [16/Oct/2026:07:10:44 +0000] "GET /sitemap.xml HTTP/1.1" 301 20 "http://workforcesaudi.core3.agency/sitemap.xml" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.147 - - [16/Oct/2026:07:10:45 +0000] "GET /wp-sitemap.xml HTTP/1.1" 200 246 "https://workforcesaudi.core3.agency/sitemap.xml" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 Edg/120.0.0.0" 106.63.26.20 - - [16/Oct/2026:07:11:07 +0000] "GET /config.json HTTP/1.1" 403 9423 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_0) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.56 Safari/535.11" 172.105.42.26 - - [16/Oct/2026:07:43:55 +0000] "POST /?wordfence_syncAttackData=1792136635.3501 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 172.105.42.26 - - [16/Oct/2026:07:44:28 +0000] "POST /?wordfence_syncAttackData=1792136668.0003 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 172.105.42.26 - - [16/Oct/2026:07:44:48 +0000] "POST /?wordfence_syncAttackData=1792136688.248 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 172.105.42.26 - - [16/Oct/2026:07:44:48 +0000] "GET /wp-content/plugins/contact-form-7/includes/css/styles.css HTTP/1.1" 200 1015 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:44:49 +0000] "GET /wp-content/plugins/contact-form-7/includes/css/styles-rtl.css HTTP/1.1" 200 121 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:44:49 +0000] "GET /wp-content/plugins/wpcf7-redirect/build/css/wpcf7-redirect-frontend.min.css HTTP/1.1" 200 124 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:44:49 +0000] "GET /wp-content/plugins/chaty/css/chaty-front.min.css HTTP/1.1" 200 6655 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:44:49 +0000] "GET /wp-content/uploads/us-assets/workforcesaudi.core3.agency.css HTTP/1.1" 200 77469 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:44:49 +0000] "GET /wp-content/plugins/cf7-conditional-fields/style.css HTTP/1.1" 200 542 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 11_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.81 Safari/537.36" 172.105.42.26 - - [16/Oct/2026:07:47:07 +0000] "POST /wp-cron.php?doing_wp_cron=1792136827.0731720924377441406250 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 172.105.42.26 - - [16/Oct/2026:07:47:05 +0000] "POST /?wordfence_syncAttackData=1792136825.2202 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 172.105.42.26 - - [16/Oct/2026:07:49:12 +0000] "POST /wp-cron.php?doing_wp_cron=1792136952.1942360401153564453125 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency" 172.105.42.26 - - [16/Oct/2026:07:49:10 +0000] "POST /?wordfence_syncAttackData=1792136950.178 HTTP/1.1" 200 20 "-" "WordPress/7.1.3; https://workforcesaudi.core3.agency"