::1 - - [12/Oct/2026:12:20:04 +0800] "GET / HTTP/1.1" 302 411 "-" "curl/8.5.0"
::1 - - [12/Oct/2026:12:20:05 +0800] "GET / HTTP/1.1" 302 4394 "-" "curl/8.5.0"
::1 - - [12/Oct/2026:12:20:05 +0800] "HEAD / HTTP/1.1" 302 4375 "-" "curl/8.5.0"
140.136.202.239 - - [12/Oct/2026:12:20:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:20:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:20:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:20:38 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:21:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:21:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:21:38 +0800] "GET / HTTP/1.1" 302 4173 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:21:38 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:22:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:22:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:22:38 +0800] "GET / HTTP/1.1" 302 4173 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:22:38 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:23:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:23:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:23:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:23:38 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:24:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:24:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:24:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:24:38 +0800] "GET / HTTP/1.1" 200 113617 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.42 - - [12/Oct/2026:12:25:01 +0800] "GET / HTTP/1.1" 200 113749 "-" "curl/8.5.0"
::1 - - [12/Oct/2026:12:25:04 +0800] "GET / HTTP/1.1" 302 411 "-" "curl/8.5.0"
::1 - - [12/Oct/2026:12:25:04 +0800] "GET / HTTP/1.1" 302 4394 "-" "curl/8.5.0"
::1 - - [12/Oct/2026:12:25:04 +0800] "HEAD / HTTP/1.1" 302 4374 "-" "curl/8.5.0"
60.248.142.179 - steps [12/Oct/2026:12:25:29 +0800] "HEAD / HTTP/1.1" 200 4620 "-" "Mozilla/5.0 (compatible; HostMonitor/1.0)"
140.136.202.239 - - [12/Oct/2026:12:25:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:25:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:25:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:25:38 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
64.225.78.34 - - [12/Oct/2026:12:25:39 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/118.0"
60.248.142.179 - steps [12/Oct/2026:12:25:39 +0800] "HEAD / HTTP/1.1" 200 4621 "-" "Mozilla/5.0 (compatible; HostMonitor/1.0)"
140.136.202.239 - - [12/Oct/2026:12:26:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:26:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:26:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:26:38 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /wmore1.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /wp_blog_footer.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /xie.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /css.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:06 +0800] "GET /radio.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /robot.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /ass.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /bisan.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /red.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /go.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /dairg.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /wt.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /wk/index.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:07 +0800] "GET /bro.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /chosen.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /wp-admin/js/index.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /wp-content/admin.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /son.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /media.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /wp-css.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /adminfuns.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:08 +0800] "GET /1.php?p= HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /txets.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /photo.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /choco.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /unaut.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /wed.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /coffexiumimage.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /class-core-files.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /403-for.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /marr.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /wp-ablbseaer.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:09 +0800] "GET /send_1751420343.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /wp-wxyy.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /wp-fgban13jx3.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /congeree.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /wp-filemanager1_260805194013.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /wp_.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /wp-omo.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /seos.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /img.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /gaxby.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:10 +0800] "GET /php7.php?p= HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:11 +0800] "GET /sddd.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:11 +0800] "GET /multirole.php?p= HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:11 +0800] "GET /gfrbb.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:11 +0800] "GET /xm2l.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:12 +0800] "GET /well.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:12 +0800] "GET /samll.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:12 +0800] "GET /abcd.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:12 +0800] "GET /765.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /ws.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /zingad.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /images.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /w.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /f35.update.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /wicked.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /BDKR28WP.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:13 +0800] "GET /z60.php?p= HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:14 +0800] "GET /wsd.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:14 +0800] "GET //CAE-2.5.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:14 +0800] "GET /dehnl.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /wp-access.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /4PJcpMFsD8B.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /or.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /1xmomo.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /aa.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET //av.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /dex.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:15 +0800] "GET /sf.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /ops.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /waf.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /b8.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /24.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /qi.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /dragonshell.php HTTP/1.1" 404 618 "-" "-"
52.141.3.247 - - [12/Oct/2026:12:27:16 +0800] "GET /mac.php HTTP/1.1" 404 618 "-" "-"
140.136.202.239 - - [12/Oct/2026:12:27:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:27:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:27:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:27:38 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:28:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:28:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:28:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:28:38 +0800] "GET / HTTP/1.1" 200 113616 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
103.253.27.92 - - [12/Oct/2026:12:28:45 +0800] "GET / HTTP/1.1" 200 113768 "-" "wp2shell-rce/1.0"
103.253.27.92 - - [12/Oct/2026:12:28:45 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 400 4852 "-" "wp2shell-rce/1.0"
103.253.27.92 - - [12/Oct/2026:12:28:45 +0800] "GET / HTTP/1.1" 200 54333 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:46 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 500 5140 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:46 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:46 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:47 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:47 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:48 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:48 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113755 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:49 +0800] "POST /wp-json/batch/v1 HTTP/1.1" 200 113754 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:49 +0800] "GET / HTTP/1.1" 200 109442 "-" "wp2shell-rce/1.0"
103.253.27.92 - - [12/Oct/2026:12:28:49 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 400 867 "-" "wp2shell-rce/1.0"
103.253.27.92 - - [12/Oct/2026:12:28:49 +0800] "GET / HTTP/1.1" 200 50278 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
103.253.27.92 - - [12/Oct/2026:12:28:50 +0800] "POST /?rest_route=/batch/v1 HTTP/1.1" 400 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36"
140.136.202.239 - - [12/Oct/2026:12:29:33 +0800] "GET / HTTP/1.1" 302 411 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.42 - - [12/Oct/2026:12:29:33 +0800] "POST /wp-cron.php?doing_wp_cron=1791779373.0895819664001464843750 HTTP/1.1" 200 480 "-" "WordPress/6.4.13; https://www.eltd2.fju.edu.tw"
140.136.202.239 - - [12/Oct/2026:12:29:33 +0800] "GET / HTTP/1.1" 200 109423 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:29:38 +0800] "GET / HTTP/1.1" 302 4172 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.239 - - [12/Oct/2026:12:29:38 +0800] "GET / HTTP/1.1" 200 113615 "-" "Mozilla/5.0 (compatible; PRTG Network Monitor (www.paessler.com); Windows)"
140.136.202.42 - - [12/Oct/2026:12:30:01 +0800] "GET / HTTP/1.1" 200 113749 "-" "curl/8.5.0"