March 25, 2025, 7 p.m. —
GET
/wp-admin/css/up.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-admin/css/up.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/upload.php
→ 404
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/upload.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-admin/alfa.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-admin/alfa.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/wso.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/wso.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/shell.phpp
→ 404
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/shell.phpp
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/wso.php
→ 404
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/wso.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-admin/maint/index.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-admin/maint/index.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/plugins/mar.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/plugins/mar.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/wp-class.php
→ 404
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-includes/wp-class.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/plugins/wp-freeform/black2llleaf.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/plugins/wp-freeform/black2llleaf.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/wp/plugins/mbt.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 7 p.m. —
GET
/wp-content/wp/plugins/mbt.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 6:59 p.m. —
GET
/
→ 200
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…
March 25, 2025, 6:59 p.m. —
GET
/wp-content/wp.php
→ 301
User-Agent: Mozlila/5.0 (Linux; Android 7.0; SM-G892A Bulid/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/6…