­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ ­ 172.105.42.26 - - [30/Jul/2026:18:03:58 +0000] "POST /wp-cron.php?doing_wp_cron=1785434638.0035669803619384765625 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 94.154.43.177 - - [30/Jul/2026:18:06:42 +0000] "GET /.env HTTP/1.1" 403 5168 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 20.100.169.152 - - [30/Jul/2026:18:24:39 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 5168 "-" "-" 172.105.42.26 - - [30/Jul/2026:18:24:42 +0000] "POST /wp-cron.php?doing_wp_cron=1785435882.3068869113922119140625 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 20.100.169.152 - - [30/Jul/2026:18:24:40 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 13965 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:42 +0000] "GET /x.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:42 +0000] "GET /mgrr.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:43 +0000] "GET /domvf.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:43 +0000] "GET /yup.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:44 +0000] "GET /X.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:44 +0000] "GET /dyt8mjxc3yofbkoriukvgjaCdefault.php HTTP/1.1" 404 13971 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:45 +0000] "GET /gec.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:45 +0000] "GET /sky.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:46 +0000] "GET /fffm.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:46 +0000] "GET /sixxis.php HTTP/1.1" 404 13952 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:47 +0000] "GET /yj09.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:47 +0000] "GET /k.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:47 +0000] "GET /k2.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:48 +0000] "GET /w.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:48 +0000] "GET /fpwch.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:49 +0000] "GET /w2025.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:49 +0000] "GET /FWAZ.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:50 +0000] "GET /qterm.php?p= HTTP/1.1" 301 20 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:50 +0000] "GET /qterm.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:51 +0000] "GET /blurbs.php HTTP/1.1" 404 13952 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:51 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 301 20 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:52 +0000] "GET /wp-ws68.php HTTP/1.1" 404 13952 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:52 +0000] "GET /xyn.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:52 +0000] "GET /ccc.php?p= HTTP/1.1" 301 20 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:53 +0000] "GET /ccc.php HTTP/1.1" 404 13948 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:53 +0000] "GET /get.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:54 +0000] "GET /images.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:55 +0000] "GET /alls.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:55 +0000] "GET /coffexium.php HTTP/1.1" 404 13953 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:56 +0000] "GET /red.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:56 +0000] "GET /wp-includes/sodium_compat/ HTTP/1.1" 200 470 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:56 +0000] "GET /wp-admin/css/colors/coffee/wp-adochan.php HTTP/1.1" 404 14010 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:57 +0000] "GET /wp-includes/Text/ HTTP/1.1" 200 402 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:57 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 690 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:57 +0000] "GET /wp-content/index.php HTTP/1.1" 200 20 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:58 +0000] "GET ///admin.php HTTP/1.1" 200 5171 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:58 +0000] "GET /177.php HTTP/1.1" 404 13950 "-" "-" 172.105.42.26 - - [30/Jul/2026:18:24:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785435899.3753859996795654296875 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 20.100.169.152 - - [30/Jul/2026:18:24:59 +0000] "GET /199.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:24:59 +0000] "GET /file52.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:00 +0000] "GET /geck.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:00 +0000] "GET /biufile.php HTTP/1.1" 404 13952 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:01 +0000] "GET /dejavu.php HTTP/1.1" 404 13952 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:01 +0000] "GET /aaf.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:02 +0000] "GET /ha.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:03 +0000] "GET /hur.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:03 +0000] "GET /h02ugyh.php HTTP/1.1" 404 13953 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:04 +0000] "GET /155.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:04 +0000] "GET /ops.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:05 +0000] "GET /ingfo.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:05 +0000] "GET /error_log.php HTTP/1.1" 404 13954 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:06 +0000] "GET /koala.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:06 +0000] "GET /mac.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:07 +0000] "GET /wefile.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:07 +0000] "GET /wp-includes/blocks/post-comments-form/ HTTP/1.1" 200 509 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:08 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 1819 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:08 +0000] "GET /makeasmtp.php?p= HTTP/1.1" 301 20 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:08 +0000] "GET /makeasmtp.php HTTP/1.1" 404 13955 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:09 +0000] "GET /2P.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:09 +0000] "GET /.well-known/about.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:10 +0000] "GET /wp-includes/ID3/about.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:10 +0000] "GET /system_log.php HTTP/1.1" 404 13956 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:10 +0000] "GET /wp-admin/css/ HTTP/1.1" 200 1601 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:11 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 424 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:11 +0000] "GET /crgio.php HTTP/1.1" 404 13950 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:11 +0000] "GET /pucci.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:12 +0000] "GET /wp-includes/blocks/details/ HTTP/1.1" 200 498 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:12 +0000] "GET /wp-includes/blocks/audio/ HTTP/1.1" 200 530 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:12 +0000] "GET /wp-temp.php HTTP/1.1" 404 13951 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:13 +0000] "GET //wp-admin/js/index.php HTTP/1.1" 301 20 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:13 +0000] "GET /wp-admin/js/ HTTP/1.1" 200 1819 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:14 +0000] "GET /puc.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:14 +0000] "GET /dx.php HTTP/1.1" 404 13949 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:15 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 200 371 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:15 +0000] "GET /7.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:15 +0000] "GET /8.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:15 +0000] "GET /1.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:16 +0000] "GET /about.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:16 +0000] "GET //admin.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:16 +0000] "GET //edit.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:17 +0000] "GET /wp-content/admin.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:17 +0000] "GET /inputs.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:17 +0000] "GET //av.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:18 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:18 +0000] "GET /wp-content/themes/index.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:18 +0000] "GET /wp-blog.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:18 +0000] "GET //wp-includes/js/jquery/ HTTP/1.1" 200 660 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:19 +0000] "GET //wp-content/admin.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:19 +0000] "GET //adminfuns.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:19 +0000] "GET //goods.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:20 +0000] "GET /ms-edit.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:20 +0000] "GET /222.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:20 +0000] "GET //cgi-bin/index.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:20 +0000] "GET //wp-includes/css/dist/ HTTP/1.1" 200 646 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:21 +0000] "GET /BDKR28WP.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:21 +0000] "GET //wp-includes/l10n/ HTTP/1.1" 200 445 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:21 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 690 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:21 +0000] "GET /wp.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:22 +0000] "GET //abcd.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:22 +0000] "GET //a1.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:22 +0000] "GET /wp-includes/Text/Diff/Engine/about.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:23 +0000] "GET //cgi-bin/admin.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:23 +0000] "GET /wp-content/ HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:23 +0000] "GET /simple.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:24 +0000] "GET /xxx.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:24 +0000] "GET /hypo.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:24 +0000] "GET /wp-admin/css/colors/blue/ HTTP/1.1" 200 424 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:25 +0000] "GET /chosen.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:25 +0000] "GET //wp-includes/block-bindings/ HTTP/1.1" 200 437 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:26 +0000] "GET /als.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:26 +0000] "GET /pol.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:26 +0000] "GET /file5.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:27 +0000] "GET /file.php? HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:27 +0000] "GET /admin.php? HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:27 +0000] "GET /aa2.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:28 +0000] "GET /ccou.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:28 +0000] "GET /dr.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:28 +0000] "GET /xamp.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:29 +0000] "GET /bless.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:29 +0000] "GET /file25.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:29 +0000] "GET /file6.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:29 +0000] "GET /a2.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:30 +0000] "GET /file15.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:30 +0000] "GET /f35.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:30 +0000] "GET /wp-load.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:31 +0000] "GET //xwpg.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:31 +0000] "GET //wp-includes/assets/ HTTP/1.1" 200 429 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:31 +0000] "GET /wp-admin/css/colors/sunrise/ HTTP/1.1" 200 425 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:31 +0000] "GET /xstelth.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:32 +0000] "GET /wp-admin/network/plugins.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:32 +0000] "GET /aaa.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:32 +0000] "GET /gecko.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:32 +0000] "GET /pbck.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:33 +0000] "GET /xiugai.php?p= HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:33 +0000] "GET /e.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:33 +0000] "GET /adminner.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:34 +0000] "GET /file1221.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:34 +0000] "GET /inx.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:34 +0000] "GET /qqqa.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:34 +0000] "GET /reviall.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:35 +0000] "GET /404.php?p= HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:35 +0000] "GET /bolt.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:35 +0000] "GET /File.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:35 +0000] "GET /fi22.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:36 +0000] "GET /zero.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:36 +0000] "GET /1xmomo.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:36 +0000] "GET /fmws.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:37 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:37 +0000] "GET /hp2.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:37 +0000] "GET /aabb.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:37 +0000] "GET /1254xx.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:38 +0000] "GET /a3ampzmbipnkpxeqhqpsanCdefault.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:38 +0000] "GET /pms297.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:38 +0000] "GET /1PJcpMFsD8B.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:38 +0000] "GET /4PJcpMFsD8B.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:39 +0000] "GET /i99z7zzbwtpteujvv6s8hiCdefault.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:39 +0000] "GET /gwaih1gfzp5vuwr04Cdefault.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:39 +0000] "GET /dyui.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:40 +0000] "GET /ho.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:40 +0000] "GET /66b867516c8f01.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:40 +0000] "GET /ext.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:40 +0000] "GET /1wvekeybd9it2di2vyipgr6Cdefault.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:41 +0000] "GET /xy9brdftkyivz9ij6rusmsCdefault.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:41 +0000] "GET /584062352875874akp.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:41 +0000] "GET /diidi.php HTTP/1.1" 403 5168 "-" "-" 20.100.169.152 - - [30/Jul/2026:18:25:41 +0000] "GET /clarebypas.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:45 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 403 5168 "-" "-" 172.105.42.26 - - [30/Jul/2026:20:47:48 +0000] "POST /wp-cron.php?doing_wp_cron=1785444468.7790420055389404296875 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 4.232.188.49 - - [30/Jul/2026:20:47:46 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 13965 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:49 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 13958 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:49 +0000] "GET /err.php HTTP/1.1" 404 13949 "-" "-" 172.105.42.26 - - [30/Jul/2026:20:47:50 +0000] "POST /wp-cron.php?doing_wp_cron=1785444470.7419428825378417968750 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 4.232.188.49 - - [30/Jul/2026:20:47:50 +0000] "GET /img.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:51 +0000] "GET //aa.php HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:51 +0000] "GET /aa.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:52 +0000] "GET //av.php HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:53 +0000] "GET /av.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:55 +0000] "GET /xa.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:55 +0000] "GET /media.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:56 +0000] "GET /images.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:56 +0000] "GET /gecko.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:57 +0000] "GET /82.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:57 +0000] "GET /xstelth.php HTTP/1.1" 404 13953 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:58 +0000] "GET /xp.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:58 +0000] "GET ///admin.php HTTP/1.1" 200 5170 "-" "-" 172.105.42.26 - - [30/Jul/2026:20:47:59 +0000] "POST /wp-cron.php?doing_wp_cron=1785444479.5500600337982177734375 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 4.232.188.49 - - [30/Jul/2026:20:47:59 +0000] "GET /adminner.php HTTP/1.1" 404 13953 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:47:59 +0000] "GET //a.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:00 +0000] "GET /k.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:00 +0000] "GET /222.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:01 +0000] "GET /mac.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:02 +0000] "GET /wp-content/uploads/ HTTP/1.1" 200 690 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:02 +0000] "GET /wp-includes/Text/ HTTP/1.1" 200 402 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:03 +0000] "GET /ops.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:03 +0000] "GET /8.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:04 +0000] "GET /FWAZ.php HTTP/1.1" 404 13951 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:04 +0000] "GET /biufile.php HTTP/1.1" 404 13952 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:05 +0000] "GET /coffexium.php HTTP/1.1" 404 13953 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:06 +0000] "GET /simple.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:06 +0000] "GET /fpwch.php HTTP/1.1" 404 13951 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:07 +0000] "GET /dex.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:07 +0000] "GET /1.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:08 +0000] "GET /wp-admin/css/colors/modern/ HTTP/1.1" 200 424 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:08 +0000] "GET /config.json.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:09 +0000] "GET /k2.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:09 +0000] "GET /raw.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:10 +0000] "GET //wp.php? HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:10 +0000] "GET /wp.php HTTP/1.1" 404 13948 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:11 +0000] "GET /fffm.php?p= HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:11 +0000] "GET /fffm.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:12 +0000] "GET /111.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:12 +0000] "GET //wp-includes/Requests/ HTTP/1.1" 200 371 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:13 +0000] "GET /ws.php HTTP/1.1" 404 13948 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:13 +0000] "GET ///coffee.php HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:14 +0000] "GET /coffee.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:14 +0000] "GET /goods.php HTTP/1.1" 404 13951 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:15 +0000] "GET /about.php? HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:15 +0000] "GET /about.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:16 +0000] "GET /admin.php HTTP/1.1" 200 5194 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:16 +0000] "GET /inputs.php? HTTP/1.1" 404 13952 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:17 +0000] "GET /inputs.php HTTP/1.1" 404 13952 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:17 +0000] "GET //adminfuns.php HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:18 +0000] "GET /adminfuns.php HTTP/1.1" 404 13953 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:18 +0000] "GET /404.php?p= HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:19 +0000] "GET /404.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:20 +0000] "GET /xxx.php HTTP/1.1" 403 5168 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:20 +0000] "GET /classwithtostring.php?p= HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:21 +0000] "GET /classwithtostring.php HTTP/1.1" 404 13957 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:21 +0000] "GET /234ff.php HTTP/1.1" 404 13951 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:22 +0000] "GET ///133.php HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:22 +0000] "GET /133.php HTTP/1.1" 404 13949 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:23 +0000] "GET /wp-ws68.php?p= HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:23 +0000] "GET /wp-ws68.php HTTP/1.1" 404 13951 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:24 +0000] "GET /mgrr.php HTTP/1.1" 404 13950 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:24 +0000] "GET /55.php?p= HTTP/1.1" 301 20 "-" "-" 4.232.188.49 - - [30/Jul/2026:20:48:25 +0000] "GET /55.php HTTP/1.1" 404 13949 "-" "-" 104.210.140.129 - - [30/Jul/2026:22:20:14 +0000] "GET /robots.txt HTTP/1.1" 200 31 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 172.105.42.26 - - [31/Jul/2026:00:34:18 +0000] "POST /wp-cron.php?doing_wp_cron=1785458058.7265150547027587890625 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 94.154.43.186 - - [31/Jul/2026:00:34:16 +0000] "GET / HTTP/1.1" 200 17200 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.105.42.26 - - [31/Jul/2026:05:05:52 +0000] "POST /wp-cron.php?doing_wp_cron=1785474352.2138888835906982421875 HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 195.178.110.211 - - [31/Jul/2026:05:05:50 +0000] "HEAD / HTTP/1.1" 200 - "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.105.42.26 - - [31/Jul/2026:05:05:52 +0000] "POST /wp-admin/admin-ajax.php?action=wordfence_testAjax HTTP/1.1" 200 32 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 172.105.42.26 - - [31/Jul/2026:05:05:56 +0000] "GET /wp-admin/admin-ajax.php?action=wordfence_doScan&isFork=0&scanMode=quick&cronKey=5bea95b89166d42b9c6eddb6a6cfa175&signature=f95208d24f394670d66bc0db6380bac0aa61b450f802aa9a9c66c8a78e8fae6b HTTP/1.1" 200 20 "-" "WordPress/7.0.2; https://workforcesaudi.core3.agency" 2a03:2880:2ff:70:: - - [31/Jul/2026:05:29:51 +0000] "GET /robots.txt HTTP/1.1" 304 - "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)"