ppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:25 -0600] "GET /mautic/app/config/local.php.sample HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:25 -0600] "GET /config/local.php.bak HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:26 -0600] "GET /mautic/app/config/local.php.bak HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:26 -0600] "GET /mautic/app/config/local.php.backup HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:26 -0600] "GET /mautic/app/config/local.php.txt HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:26 -0600] "GET /mautic/app/config/local.php.dist HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:26 -0600] "GET /app/config/local.php.save HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:27 -0600] "GET /config/local.php.save HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:27 -0600] "GET /app/config/local.php.bak HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:27 -0600] "GET /app/config/local.php.old HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:27 -0600] "GET /config/local.php.old HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:27 -0600] "GET /parameters.php.old HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:28 -0600] "GET /mautic/app/config/local.php.old HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
167.172.177.125 - - [14/Mar/2026:02:36:28 -0600] "GET /mautic/app/config/local.php~ HTTP/1.1" 404 454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.137 Safari/537.36"
1.53.88.32 - - [14/Mar/2026:02:36:53 -0600] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
1.53.88.32 - - [14/Mar/2026:02:36:55 -0600] "POST /cgi-bin/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/%%32%65%%32%65/bin/sh HTTP/1.1" 400 486 "-" "libredtail-http"
42.116.108.125 - - [14/Mar/2026:02:36:57 -0600] "POST /hello.world?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 491 "-" "libredtail-http"
42.116.108.125 - - [14/Mar/2026:02:36:59 -0600] "POST /?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 11228 "-" "libredtail-http"
42.116.108.125 - - [14/Mar/2026:02:37:00 -0600] "GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1" 404 490 "-" "libredtail-http"
42.116.108.125 - - [14/Mar/2026:02:37:02 -060ML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:34 -0600] "GET /index/function.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:34 -0600] "GET /adminfuns.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:35 -0600] "GET /wp-content/cache/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:35 -0600] "GET /wp-includes/js/thickbox/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:35 -0600] "GET /goods.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:35 -0600] "GET /sf.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:35 -0600] "GET /wp-admin/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:36 -0600] "GET /wp-admin/images/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:36 -0600] "GET /wp-content/admin.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:36 -0600] "GET /wp-content/uploads/admin.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:36 -0600] "GET /wp-includes/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:36 -0600] "GET /wp-includes/css/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:37 -0600] "GET /wp-includes/js/plupload/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:37 -0600] "GET /.well-known/ HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:37 -0600] "GET /222.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:37 -0600] "GET /abcd.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:37 -0600] "GET /class-t.api.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:38 -0600] "GET /classwithtostring.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:38 -0600] "GET /file.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36"
20.219.132.149 - - [14/Mar/2026:02:54:38 -0600] "GET /info.php HTTP/1.1" 404 515 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWeb