JezK

Edit File: htcusmetics.com.afghandevelopers.net-ssl_log

122.190.49.41 - - [25/Sep/2026:12:02:23 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 74.7.230.2 - - [25/Sep/2026:12:15:16 +0000] "GET /robots.txt HTTP/2" 200 97 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.243.215 - - [25/Sep/2026:12:15:52 +0000] "GET / HTTP/2" 429 0 "https://trusted-ranking-signal-matrix.007eaglegaze.online" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 117.50.70.52 - - [25/Sep/2026:12:32:04 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:12:36:07 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 122.190.49.41 - - [25/Sep/2026:12:53:41 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:12:53:44 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 20.219.14.152 - - [25/Sep/2026:13:08:15 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:16 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:16 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:17 +0000] "GET /aa.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:17 +0000] "GET /z70.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:18 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:18 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:19 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:19 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:20 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:21 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:21 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:22 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:22 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:23 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:23 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:24 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:24 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:25 +0000] "GET /wsd.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:25 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:26 +0000] "GET /wmore1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:26 +0000] "GET /z60.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:27 +0000] "GET /pJPoKA.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:27 +0000] "GET /24.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:28 +0000] "GET /xxw.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:28 +0000] "GET /bnmtp.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:29 +0000] "GET /ebkid.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:29 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:30 +0000] "GET /x33.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:30 +0000] "GET /cae.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:31 +0000] "GET /txets.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:32 +0000] "GET /wp-update.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:32 +0000] "GET /foxv10.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:33 +0000] "GET /177.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:33 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:34 +0000] "GET /0xD.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:34 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:35 +0000] "GET /01.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:35 +0000] "GET /ab.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:36 +0000] "GET /senohprae.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:36 +0000] "GET /xwpg.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:37 +0000] "GET /flamini.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:37 +0000] "GET /themes.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:38 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:38 +0000] "GET /opsh.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:39 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:39 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:40 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:40 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:41 +0000] "GET /Callback.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:41 +0000] "GET /wp-includes/ma1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:42 +0000] "GET /pass4.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:42 +0000] "GET /drttewyh.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:43 +0000] "GET /a22.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:43 +0000] "GET /AS4.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:44 +0000] "GET /dLgKomsB6Vk.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:45 +0000] "GET /eBJbEzL6ShF.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:45 +0000] "GET /sh.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:46 +0000] "GET /MacKenzie.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:46 +0000] "GET /groud1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:47 +0000] "GET /ded.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:47 +0000] "GET /bro.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:48 +0000] "GET /CgK328JWR7B.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:13:08:48 +0000] "GET /wp_motu_9wz9m.php HTTP/1.1" 401 36 "-" "-" 54.175.192.88 - - [25/Sep/2026:13:20:39 +0000] "GET / HTTP/1.1" 200 37371 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0) Gecko/20100101 Firefox/49.0" 198.235.24.238 - - [25/Sep/2026:13:21:59 +0000] "GET / HTTP/1.1" 200 40080 "-" "Hello from Palo Alto Networks, find out more about our scans in https://docs-cortex.paloaltonetworks.com/r/1/Cortex-Xpanse/Scanning-activity" 117.50.70.52 - - [25/Sep/2026:13:23:27 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 200.225.203.109 - - [25/Sep/2026:13:25:55 +0000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Edge/81.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:13:28:49 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 65.181.111.180 - - [25/Sep/2026:13:55:24 +0000] "POST /wp-cron.php?doing_wp_cron=1790344524.8107779026031494140625 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 104.225.219.49 - - [25/Sep/2026:13:55:24 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 117.50.70.52 - - [25/Sep/2026:14:00:28 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 104.225.219.49 - - [25/Sep/2026:14:20:58 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 122.190.49.41 - - [25/Sep/2026:14:23:26 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 117.50.70.52 - - [25/Sep/2026:14:38:50 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 65.181.111.180 - - [25/Sep/2026:14:41:37 +0000] "POST /wp-cron.php?doing_wp_cron=1790347297.8519721031188964843750 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 122.190.49.41 - - [25/Sep/2026:14:41:37 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 122.190.49.41 - - [25/Sep/2026:15:13:49 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 117.50.70.52 - - [25/Sep/2026:15:19:27 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:15:33:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 122.190.49.41 - - [25/Sep/2026:15:33:14 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 74.7.243.215 - - [25/Sep/2026:15:41:12 +0000] "GET /sitemaps.xml HTTP/2" 200 228 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 20.219.14.152 - - [25/Sep/2026:15:50:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:44 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:45 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:45 +0000] "GET /aa.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:46 +0000] "GET /z70.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:46 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:47 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:48 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:48 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:49 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:49 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:50 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:50 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:51 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:51 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:52 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:52 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:53 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:53 +0000] "GET /wsd.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:54 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:54 +0000] "GET /wmore1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:55 +0000] "GET /z60.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:55 +0000] "GET /pJPoKA.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:56 +0000] "GET /24.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:56 +0000] "GET /xxw.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:57 +0000] "GET /bnmtp.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:58 +0000] "GET /ebkid.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:58 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:59 +0000] "GET /x33.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:50:59 +0000] "GET /cae.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:00 +0000] "GET /txets.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:00 +0000] "GET /wp-update.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:01 +0000] "GET /foxv10.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:01 +0000] "GET /177.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:02 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:02 +0000] "GET /0xD.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:03 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:03 +0000] "GET /01.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:04 +0000] "GET /ab.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:04 +0000] "GET /senohprae.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:05 +0000] "GET /xwpg.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:05 +0000] "GET /flamini.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:06 +0000] "GET /themes.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:06 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:07 +0000] "GET /opsh.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:08 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:08 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:09 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:09 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:10 +0000] "GET /Callback.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:10 +0000] "GET /wp-includes/ma1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:11 +0000] "GET /pass4.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:11 +0000] "GET /drttewyh.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:12 +0000] "GET /a22.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:12 +0000] "GET /AS4.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:13 +0000] "GET /dLgKomsB6Vk.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:13 +0000] "GET /eBJbEzL6ShF.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:14 +0000] "GET /sh.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:14 +0000] "GET /MacKenzie.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:15 +0000] "GET /groud1.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:15 +0000] "GET /ded.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:16 +0000] "GET /bro.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:16 +0000] "GET /CgK328JWR7B.php HTTP/1.1" 401 36 "-" "-" 20.219.14.152 - - [25/Sep/2026:15:51:17 +0000] "GET /wp_motu_9wz9m.php HTTP/1.1" 401 36 "-" "-" 65.181.111.180 - - [25/Sep/2026:15:59:17 +0000] "POST /wp-cron.php?doing_wp_cron=1790351957.6497180461883544921875 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 117.50.70.52 - - [25/Sep/2026:15:59:17 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:16:07:24 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 122.190.49.41 - - [25/Sep/2026:16:23:15 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 122.190.49.41 - - [25/Sep/2026:16:23:37 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 117.50.70.52 - - [25/Sep/2026:16:38:38 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 93.152.209.11 - - [25/Sep/2026:17:13:20 +0000] "GET / HTTP/2" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 93.152.209.11 - - [25/Sep/2026:17:13:21 +0000] "GET / HTTP/2" 200 37408 "https://mail.htcusmetics.com:443" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 117.50.70.52 - - [25/Sep/2026:17:18:15 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 122.190.49.41 - - [25/Sep/2026:17:18:22 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 65.181.111.180 - - [25/Sep/2026:17:41:56 +0000] "POST /wp-cron.php?doing_wp_cron=1790358116.6058559417724609375000 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [25/Sep/2026:17:41:56 +0000] "POST /wp-login.php HTTP/1.1" 200 3764 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 117.50.70.52 - - [25/Sep/2026:17:58:58 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 217.69.6.124 - - [25/Sep/2026:18:03:28 +0000] "GET /wp-content/clases.php?entry=142.145.198.224.202.156.206.210.233.242.208.187.210.170.155.149.160.156.161.159.156.156.157.159.158.167.89.90.114.102.168.159.176.159.102 HTTP/1.1" 200 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/143.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:05 +0000] "GET /wp-login.php HTTP/1.1" 200 3658 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 62.60.130.215 - - [25/Sep/2026:18:10:05 +0000] "GET /?author=1 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 62.60.130.215 - - [25/Sep/2026:18:10:05 +0000] "GET /author/admin/ HTTP/1.1" 200 33481 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0" 62.60.130.215 - - [25/Sep/2026:18:10:06 +0000] "GET /?author=2 HTTP/1.1" 200 32911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:07 +0000] "GET /?author=3 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:07 +0000] "GET /?author=4 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:08 +0000] "GET /?author=5 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:08 +0000] "GET /?author=6 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:09 +0000] "GET /?author=7 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:10 +0000] "GET /?author=8 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:10 +0000] "GET /?author=9 HTTP/1.1" 404 33113 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:11 +0000] "GET /?rest_route=/wp/v2/users&per_page=30&orderby=id&order=asc HTTP/1.1" 200 306 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:11 +0000] "GET /?feed=feed HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:11 +0000] "GET /feed/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:12 +0000] "GET /?feed=rss HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:12 +0000] "GET /feed/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:13 +0000] "GET /?feed=rss2 HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:13 +0000] "GET /feed/ HTTP/1.1" 200 692 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:13 +0000] "GET /?feed=atom HTTP/1.1" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 62.60.130.215 - - [25/Sep/2026:18:10:14 +0000] "GET /feed/atom/ HTTP/1.1" 200 1694 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:18:16:47 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 114.119.130.12 - - [25/Sep/2026:18:22:26 +0000] "GET / HTTP/1.1" 200 33539 "https://htcusmetics.com/" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (HTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 117.50.70.52 - - [25/Sep/2026:18:36:03 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 127.0.0.1 - - [25/Sep/2026:19:13:52 +0000] "GET /.git/config HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0" 117.50.70.52 - - [25/Sep/2026:19:14:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 122.190.49.41 - - [25/Sep/2026:19:23:07 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:19:24:07 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 122.190.49.41 - - [25/Sep/2026:19:24:18 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 209.38.55.113 - - [25/Sep/2026:19:30:01 +0000] "POST /wp-login.php HTTP/1.1" 200 3763 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 65.181.111.180 - - [25/Sep/2026:19:54:51 +0000] "POST /wp-cron.php?doing_wp_cron=1790366091.7820909023284912109375 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 117.50.70.52 - - [25/Sep/2026:19:54:51 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 209.38.55.113 - - [25/Sep/2026:19:54:53 +0000] "POST /wp-login.php HTTP/1.1" 200 2135 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:19:58:42 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 209.38.55.113 - - [25/Sep/2026:20:20:15 +0000] "POST /wp-login.php HTTP/1.1" 200 3764 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:20:31:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_4_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4.1 Safari/605.1.15" 192.253.248.94 - - [25/Sep/2026:20:33:22 +0000] "POST /wp-login.php HTTP/1.1" 200 12653 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 117.50.70.52 - - [25/Sep/2026:20:34:30 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 65.181.111.180 - - [25/Sep/2026:20:51:22 +0000] "POST /wp-cron.php?doing_wp_cron=1790369482.3018560409545898437500 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [25/Sep/2026:20:51:22 +0000] "POST /wp-login.php HTTP/1.1" 200 3763 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 182.62.79.125 - - [25/Sep/2026:20:57:31 +0000] "POST /xmlrpc.php HTTP/1.1" 403 1242 "-" "Mozilla/5.0 (Linux; Android 10; arm64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/97.0.0.0 Safari/537.36" 122.190.49.41 - - [25/Sep/2026:20:58:19 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 209.38.55.113 - - [25/Sep/2026:21:16:17 +0000] "POST /wp-login.php HTTP/1.1" 200 2135 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 209.38.55.113 - - [25/Sep/2026:21:41:15 +0000] "POST /wp-login.php HTTP/1.1" 200 3764 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 212.156.70.154 - - [25/Sep/2026:21:43:21 +0000] "GET / HTTP/1.1" 400 52 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 65.181.111.180 - - [25/Sep/2026:22:06:08 +0000] "POST /wp-cron.php?doing_wp_cron=1790373968.7533199787139892578125 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [25/Sep/2026:22:06:08 +0000] "POST /wp-login.php HTTP/1.1" 200 3763 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 93.152.209.11 - - [25/Sep/2026:22:23:47 +0000] "GET / HTTP/2" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 93.152.209.11 - - [25/Sep/2026:22:23:47 +0000] "GET / HTTP/2" 200 37371 "https://htcusmetics.com:443" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 209.38.55.113 - - [25/Sep/2026:22:31:21 +0000] "POST /wp-login.php HTTP/1.1" 200 2135 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 114.119.156.134 - - [25/Sep/2026:22:51:23 +0000] "GET /category-sitemap1.xml HTTP/1.1" 200 229 "-" "Mozilla/5.0 (Linux; Android 7.0;) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; PetalBot;+https://webmaster.petalsearch.com/site/petalbot)" 209.38.55.113 - - [25/Sep/2026:22:56:22 +0000] "POST /wp-login.php HTTP/1.1" 200 3764 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 20.58.177.98 - - [25/Sep/2026:22:58:44 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:45 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:45 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:46 +0000] "GET /aa.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:46 +0000] "GET /z70.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:47 +0000] "GET /f35.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:47 +0000] "GET /adminfuns.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:48 +0000] "GET /av.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:48 +0000] "GET /dex.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:48 +0000] "GET /chosen.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:49 +0000] "GET /1.php?p= HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:49 +0000] "GET /radio.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:50 +0000] "GET /blacks.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:50 +0000] "GET /alfa.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:51 +0000] "GET /wp_blog_footer.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:51 +0000] "GET /b8.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:52 +0000] "GET /xex.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:52 +0000] "GET /ass.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:53 +0000] "GET /wsd.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:53 +0000] "GET /BDKR28WP.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:53 +0000] "GET /wmore1.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:54 +0000] "GET /z60.php?p= HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:54 +0000] "GET /pJPoKA.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:55 +0000] "GET /24.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:55 +0000] "GET /xxw.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:56 +0000] "GET /bnmtp.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:56 +0000] "GET /ebkid.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:56 +0000] "GET /133.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:57 +0000] "GET /x33.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:57 +0000] "GET /cae.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:58 +0000] "GET /txets.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:58 +0000] "GET /wp-update.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:59 +0000] "GET /foxv10.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:59 +0000] "GET /177.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:58:59 +0000] "GET /ccc.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:00 +0000] "GET /0xD.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:00 +0000] "GET /sallu.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:01 +0000] "GET /01.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:01 +0000] "GET /ab.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:02 +0000] "GET /senohprae.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:02 +0000] "GET /xwpg.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:02 +0000] "GET /flamini.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:03 +0000] "GET /themes.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:03 +0000] "GET /0.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:04 +0000] "GET /opsh.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:04 +0000] "GET /media.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:05 +0000] "GET /images.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:05 +0000] "GET /ops.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:05 +0000] "GET /mac.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:06 +0000] "GET /Callback.php?p= HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:06 +0000] "GET /wp-includes/ma1.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:07 +0000] "GET /pass4.php?p= HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:07 +0000] "GET /drttewyh.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:08 +0000] "GET /a22.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:08 +0000] "GET /AS4.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:08 +0000] "GET /dLgKomsB6Vk.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:09 +0000] "GET /eBJbEzL6ShF.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:09 +0000] "GET /sh.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:10 +0000] "GET /MacKenzie.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:10 +0000] "GET /groud1.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:11 +0000] "GET /ded.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:11 +0000] "GET /bro.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:12 +0000] "GET /CgK328JWR7B.php HTTP/1.1" 404 5750 "-" "-" 20.58.177.98 - - [25/Sep/2026:22:59:12 +0000] "GET /wp_motu_9wz9m.php HTTP/1.1" 404 5750 "-" "-" 122.190.49.41 - - [25/Sep/2026:22:59:41 +0000] "POST /wp-login.php HTTP/1.1" 200 2131 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 212.156.70.154 - - [25/Sep/2026:23:18:55 +0000] "GET / HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 209.38.55.113 - - [25/Sep/2026:23:21:22 +0000] "POST /wp-login.php HTTP/1.1" 200 3763 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 212.156.70.154 - - [25/Sep/2026:23:26:44 +0000] "GET / HTTP/1.1" 401 36 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" 74.7.175.159 - - [25/Sep/2026:23:30:04 +0000] "GET /robots.txt HTTP/2" 400 52 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 74.7.227.188 - - [25/Sep/2026:23:30:04 +0000] "GET / HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 65.181.111.180 - - [25/Sep/2026:23:41:49 +0000] "POST /wp-cron.php?doing_wp_cron=1790379709.1633119583129882812500 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 173.252.69.30 - - [25/Sep/2026:23:41:48 +0000] "GET /robots.txt HTTP/2" 301 0 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 173.252.69.30 - - [25/Sep/2026:23:41:49 +0000] "GET /robots.txt HTTP/2" 200 109 "-" "facebookexternalhit/1.1 (+http://www.facebook.com/externalhit_uatext.php)" 209.38.55.113 - - [25/Sep/2026:23:46:18 +0000] "POST /wp-login.php HTTP/1.1" 200 2135 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 209.38.55.113 - - [26/Sep/2026:00:11:18 +0000] "POST /wp-login.php HTTP/1.1" 200 3764 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 20.58.177.98 - - [26/Sep/2026:00:11:58 +0000] "GET /wp-content/plugins/hellopress/wp_filemanager.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:11:58 +0000] "GET /this_is_a_new_hello_world.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:11:59 +0000] "GET /3PJcpMFsD8B.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:11:59 +0000] "GET /aa.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:00 +0000] "GET /z70.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:00 +0000] "GET /f35.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:01 +0000] "GET /adminfuns.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:01 +0000] "GET /av.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:02 +0000] "GET /dex.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:02 +0000] "GET /chosen.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:03 +0000] "GET /1.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:03 +0000] "GET /radio.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:04 +0000] "GET /blacks.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:04 +0000] "GET /alfa.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:05 +0000] "GET /wp_blog_footer.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:05 +0000] "GET /b8.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:06 +0000] "GET /xex.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:06 +0000] "GET /ass.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:07 +0000] "GET /wsd.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:07 +0000] "GET /BDKR28WP.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:08 +0000] "GET /wmore1.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:08 +0000] "GET /z60.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:09 +0000] "GET /pJPoKA.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:09 +0000] "GET /24.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:09 +0000] "GET /xxw.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:10 +0000] "GET /bnmtp.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:10 +0000] "GET /ebkid.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:11 +0000] "GET /133.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:11 +0000] "GET /x33.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:12 +0000] "GET /cae.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:12 +0000] "GET /txets.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:13 +0000] "GET /wp-update.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:13 +0000] "GET /foxv10.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:13 +0000] "GET /177.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:14 +0000] "GET /ccc.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:14 +0000] "GET /0xD.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:15 +0000] "GET /sallu.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:15 +0000] "GET /01.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:16 +0000] "GET /ab.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:16 +0000] "GET /senohprae.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:17 +0000] "GET /xwpg.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:17 +0000] "GET /flamini.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:18 +0000] "GET /themes.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:18 +0000] "GET /0.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:19 +0000] "GET /opsh.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:20 +0000] "GET /media.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:20 +0000] "GET /images.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:20 +0000] "GET /ops.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:21 +0000] "GET /mac.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:21 +0000] "GET /Callback.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:22 +0000] "GET /wp-includes/ma1.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:22 +0000] "GET /pass4.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:23 +0000] "GET /drttewyh.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:23 +0000] "GET /a22.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:24 +0000] "GET /AS4.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:24 +0000] "GET /dLgKomsB6Vk.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:25 +0000] "GET /eBJbEzL6ShF.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:25 +0000] "GET /sh.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:26 +0000] "GET /MacKenzie.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:26 +0000] "GET /groud1.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:27 +0000] "GET /ded.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:27 +0000] "GET /bro.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:27 +0000] "GET /CgK328JWR7B.php HTTP/1.1" 401 36 "-" "-" 20.58.177.98 - - [26/Sep/2026:00:12:28 +0000] "GET /wp_motu_9wz9m.php HTTP/1.1" 401 36 "-" "-" 209.38.55.113 - - [26/Sep/2026:00:36:15 +0000] "POST /wp-login.php HTTP/1.1" 200 3763 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 65.181.111.180 - - [26/Sep/2026:01:01:09 +0000] "POST /wp-cron.php?doing_wp_cron=1790384469.0869510173797607421875 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [26/Sep/2026:01:01:08 +0000] "POST /wp-login.php HTTP/1.1" 200 2134 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 122.190.49.41 - - [26/Sep/2026:01:11:59 +0000] "POST /wp-login.php HTTP/1.1" 200 2128 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 122.190.49.41 - - [26/Sep/2026:01:24:33 +0000] "POST /wp-login.php HTTP/1.1" 200 2128 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 209.38.55.113 - - [26/Sep/2026:01:26:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 65.181.111.180 - - [26/Sep/2026:01:51:10 +0000] "POST /wp-cron.php?doing_wp_cron=1790387470.3147640228271484375000 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [26/Sep/2026:01:51:10 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 45.138.12.54 - - [26/Sep/2026:01:58:21 +0000] "GET / HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.138.12.54 - - [26/Sep/2026:01:58:21 +0000] "GET /ps-18d8bc4f7bebb3b0-d72f-notfound HTTP/1.1" 401 53 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:01:58:21 +0000] "GET /config.json HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.138.12.54 - - [26/Sep/2026:01:58:22 +0000] "GET /phpinfo.php HTTP/1.1" 401 53 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:01:58:22 +0000] "GET /api/.env HTTP/1.1" 401 53 "-" "curl/8.6.0" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /.env HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /.env.save HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /.env.prod HTTP/1.1" 401 53 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /_profiler/phpinfo HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /phpinfo HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /dev/.env HTTP/1.1" 401 53 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0 Safari/537.36" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /application/.env HTTP/1.1" 401 53 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" 45.138.12.54 - - [26/Sep/2026:01:58:23 +0000] "GET /php_info.php HTTP/1.1" 401 53 "-" "curl/8.6.0" 102.220.161.89 - - [26/Sep/2026:01:59:42 +0000] "GET / HTTP/2" 301 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 102.220.161.89 - - [26/Sep/2026:01:59:42 +0000] "GET / HTTP/2" 200 37415 "https://mail.htcusmetics.com:443" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 44.204.245.65 - - [26/Sep/2026:02:03:17 +0000] "GET / HTTP/1.1" 200 314 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 93.152.221.147 - - [26/Sep/2026:02:04:43 +0000] "GET / HTTP/1.1" 200 314 "-" "Mozilla/5.0 (compatible; enrich/1.0)" 209.38.55.113 - - [26/Sep/2026:02:16:01 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 122.190.49.41 - - [26/Sep/2026:02:36:53 +0000] "POST /wp-login.php HTTP/1.1" 200 2128 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 209.38.55.113 - - [26/Sep/2026:02:41:03 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:125.0) Gecko/20100101 Firefox/125.0" 65.181.111.180 - - [26/Sep/2026:03:06:01 +0000] "POST /wp-cron.php?doing_wp_cron=1790391961.0835700035095214843750 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [26/Sep/2026:03:06:00 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0" 74.7.243.215 - - [26/Sep/2026:03:24:17 +0000] "GET / HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.230.2 - - [26/Sep/2026:03:24:17 +0000] "GET /robots.txt HTTP/2" 200 97 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 209.38.55.113 - - [26/Sep/2026:03:30:57 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 65.181.111.180 - - [26/Sep/2026:03:56:10 +0000] "POST /wp-cron.php?doing_wp_cron=1790394970.9598829746246337890625 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [26/Sep/2026:03:56:10 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" 209.38.55.113 - - [26/Sep/2026:04:20:40 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 161.118.209.40 - - [26/Sep/2026:04:30:34 +0000] "GET / HTTP/2" 200 37371 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_4_1 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:35 +0000] "GET / HTTP/2" 200 37371 "-" "Go-http-client/2.0" 161.118.209.40 - - [26/Sep/2026:04:30:36 +0000] "GET /wp-login.php HTTP/2" 200 4123 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 161.118.209.40 - - [26/Sep/2026:04:30:36 +0000] "GET /wp-admin/ HTTP/2" 302 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 161.118.209.40 - - [26/Sep/2026:04:30:37 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fhtcusmetics.com%2Fwp-admin%2F&reauth=1 HTTP/2" 200 4165 "https://htcusmetics.com/wp-admin/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 161.118.209.40 - - [26/Sep/2026:04:30:37 +0000] "GET /administrator/ HTTP/2" 404 36712 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 161.118.209.40 - - [26/Sep/2026:04:30:38 +0000] "GET /user/login HTTP/2" 404 36712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/116.0 Safari/537.36" 161.118.209.40 - - [26/Sep/2026:04:30:39 +0000] "GET /admin HTTP/2" 302 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:40 +0000] "GET /wp-admin/ HTTP/2" 302 0 "https://htcusmetics.com/admin" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:40 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fhtcusmetics.com%2Fwp-admin%2F&reauth=1 HTTP/2" 200 4165 "https://htcusmetics.com/wp-admin/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:41 +0000] "GET /login HTTP/2" 302 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 161.118.209.40 - - [26/Sep/2026:04:30:41 +0000] "GET /wp-login.php HTTP/2" 200 4123 "https://htcusmetics.com/login" "Mozilla/5.0 (Macintosh; Intel Mac OS X 13_5_1) AppleWebKit/605.1.15 Safari/605.1.15" 161.118.209.40 - - [26/Sep/2026:04:30:42 +0000] "GET /register HTTP/2" 404 36712 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:43 +0000] "GET /admin HTTP/2" 302 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:43 +0000] "GET /wp-admin/ HTTP/2" 302 0 "https://htcusmetics.com/admin" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:44 +0000] "GET /wp-login.php?redirect_to=https%3A%2F%2Fhtcusmetics.com%2Fwp-admin%2F&reauth=1 HTTP/2" 200 4165 "https://htcusmetics.com/wp-admin/" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:44 +0000] "GET /login HTTP/2" 302 0 "-" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 161.118.209.40 - - [26/Sep/2026:04:30:45 +0000] "GET /wp-login.php HTTP/2" 200 4117 "https://htcusmetics.com/login" "Mozilla/5.0 (iPad; CPU OS 17_4 like Mac OS X) AppleWebKit/605.1.15 Mobile/15E148" 65.181.111.180 - - [26/Sep/2026:04:45:16 +0000] "POST /wp-cron.php?doing_wp_cron=1790397916.4869239330291748046875 HTTP/1.1" 200 0 "-" "WordPress/7.1.2; https://htcusmetics.com" 209.38.55.113 - - [26/Sep/2026:04:45:16 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 74.7.227.27 - - [26/Sep/2026:04:50:45 +0000] "GET / HTTP/2" 429 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot)" 74.7.241.128 - - [26/Sep/2026:04:50:45 +0000] "GET /robots.txt HTTP/2" 200 97 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot" 209.38.55.113 - - [26/Sep/2026:05:10:17 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" 209.38.55.113 - - [26/Sep/2026:05:35:12 +0000] "POST /wp-login.php HTTP/1.1" 200 2130 "https://htcusmetics.com/wp-login.php" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0"